`org.springframework:spring-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-core

Total PRs:
447 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
205 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

GHSA-f866-m9mv-2xr3 CVE-2011-2894 MODERATE published about 4 years ago • updated 2 days ago

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects ...

View all 18 advisories

Recent PRs

RSS Feed

Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in /mvn/dependencies/spring

link-it/govway #246

6.2.10 → 6.2.11 Patch PR

Closed 9 months ago 1 comment

Bump org.springframework:spring-core from 6.2.7 to 6.2.11

encircled/Joiner #25

6.2.7 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.8 to 6.2.11

javalite/javalite #1423

6.2.8 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.3 to 6.2.11

DtsvnProj/craftercms #10

6.2.3 → 6.2.11 Patch PR

Open 9 months ago

chore(deps): bump org.springframework:spring-core from 6.2.3 to 6.2.11 in /osgi/blueprint

smooks/smooks-examples #582

6.2.3 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.2 to 6.2.11

DIGI-UW/OpenELIS-Global-2 #2240

6.2.2 → 6.2.11 Patch PR

Open 9 months ago 2 comments

Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in the maven group across 1 directory

se2026/ORCID-Source #8

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 2 directories with 46 updates

craftercms/craftercms #8353

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

chore(deps): bump org.springframework:spring-core from 6.2.8 to 6.2.11

binaryeq/daleq #75

6.2.8 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in /mappingservice-plugin

kit-data-manager/tomo_mapper #84

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 5.3.22 to 6.2.11

ghas-labs-2025-09-08-derekrenew/SecurityShepherd #12

5.3.22 → 6.2.11 Major PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.6 to 6.2.11

mattecasu/rdf-indexer #127

6.2.6 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 5.3.22 to 6.2.11

ghas-labs-2025-09-08-abhi-2/SecurityShepherd #12

5.3.22 → 6.2.11 Major PR

Closed 9 months ago 1 comment

build: bump org.springframework:spring-core from 6.2.10 to 6.2.11

tzok/mcq4structures #437

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #581

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

fix(deps): bump the prod-deps group across 1 directory with 3 updates

folio-org/folio-flow-engine #121

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

chore(deps): bump the test group with 2 updates

WilliamGarciae/symmetrie #5

6.2.5 → 6.2.11 Patch PR

Open 9 months ago 2 comments

chore(deps): bump the production-minor-patch group with 9 updates

WilliamGarciae/symmetrie #2

6.2.5 → 6.2.11 Patch PR

Closed 9 months ago 2 comments

Bump the maven group across 16 directories with 8 updates

dhay3/spring #1

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR

Open 9 months ago

Bump the maven group across 1 directory with 10 updates

Mzachky/linguist #1

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR

Open 9 months ago

Bump the maven group across 1 directory with 10 updates

081905106592/linguist #1

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR

Open 9 months ago

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7265

5.3.39 → 6.0.0 Major PR

Closed 9 months ago

chore(deps): bump the test group with 2 updates

GerardFulaimin/Snackbar #5

6.2.5 → 6.2.11 Patch PR

Closed 9 months ago 2 comments

chore(deps): bump the production-minor-patch group with 9 updates

GerardFulaimin/Snackbar #2

6.2.5 → 6.2.11 Patch PR

Open 9 months ago 1 comment

build(deps): Bump org.springframework:spring-core from 6.2.10 to 6.2.11

vmware/build-tools-for-vmware-aria #858

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

mars-sim/mars-sim #1736

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

PCGen/pcgen #7402

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

spring-projects/spring-ldap #1226

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

LarsEckart/learning-hour-only-mock-types-that-you-own #219

6.2.10 → 6.2.11 Patch PR

Closed 9 months ago 1 comment

chore: bump org.springframework:spring-core from 6.2.10 to 6.2.11

sarananivsh/helloworld3 #149

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore: bump org.springframework:spring-core from 6.2.10 to 6.2.11

sarananivsh/helloworld4 #174

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore(deps): 依赖项升级[org.springframework:spring-core][6.2.10 => 6.2.11]

ACANX/MetaOpen #279

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

chore: bump org.springframework:spring-core from 6.2.10 to 6.2.11

sarananivsh/helloworld5 #152

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 5.3.29 to 6.2.11

aehrc/snap2snomed #516

5.3.29 → 6.2.11 Major PR

Open 9 months ago 2 comments

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7261

5.3.39 → 6.0.0 Major PR

Closed 9 months ago

chore(deps): bump the test group with 2 updates

87126828/87126828 #5

6.2.5 → 6.2.11 Patch PR

Closed 9 months ago 2 comments

chore(deps): bump the production-minor-patch group with 9 updates

87126828/87126828 #2

6.2.5 → 6.2.11 Patch PR

Open 9 months ago 2 comments

build: bump org.springframework:spring-core from 5.3.37 to 6.2.11

fast-excel/fastexcel #573

5.3.37 → 6.2.11 Major PR

Open 9 months ago 2 comments

Update: Bump org.springframework:spring-core from 6.0.15 to 6.2.11

anishb266/dependabot-testing #11

6.0.15 → 6.2.11 Minor PR

Open 9 months ago

Bump org.springframework:spring-core from 4.3.13.RELEASE to 6.2.11

jayanthielangoTR/JTest #15

4.3.13.RELEASE → 6.2.11 Major PR

Open 9 months ago

Bump org.springframework:spring-core from 6.2.3 to 6.2.11

reactor/projectreactor.io #233

6.2.3 → 6.2.11 Patch PR

Open 9 months ago

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7259

5.3.39 → 6.0.0 Major PR

Closed 9 months ago 1 comment

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7256

5.3.39 → 6.0.0 Major PR

Open 9 months ago

Bump org.springframework:spring-core from 5.3.0 to 5.3.14 in /packages/sub

ghas-labs-2025-08-27-brianc-ghas-labs/terragoat-iac #4

5.3.0 → 5.3.14 Patch PR

Open 9 months ago

Bump org.springframework:spring-core from 5.3.22 to 6.2.10

ghas-labs-2025-09-08-derekrenew/SecurityShepherd #7

5.3.22 → 6.2.10 Major PR

Open 9 months ago

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7250

5.3.39 → 6.0.0 Major PR

Open 10 months ago

Bump the maven group across 1 directory with 10 updates

AKJUS/linguist #42

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR

Open 10 months ago

Bump the maven group across 1 directory with 10 updates

tattedprincezz/linguist #1

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR

Open 10 months ago

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7244

5.3.39 → 6.0.0 Major PR

Open 10 months ago

chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7240

5.3.39 → 6.0.0 Major PR

Closed 10 months ago 3 comments

Package Details

Name:	`org.springframework:spring-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-core`
JSON API:	View JSON

Security Advisories

18

Active advisories

HIGH 8

MODERATE 10

View All maven Advisories

Package Information

Description:

Spring Core

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	157,893
Dependent Packages:	6,691
Ranking:	Top 0.0048% by dependent repos Top 0.009% by dependent pkgs

PR Status

Open 214 (47.9%)

Merged 79 (17.7%)

Closed 131 (29.3%)

PR Types

Major 111 (24.8%)

Minor 34 (7.6%)

Patch 279 (62.4%)

org.springframework:spring-core

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Denial of Service in org.springframework:spring-core

Log entry injection in Spring Framework

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Recent PRs

Package Details

Security Advisories

18

Package Information

PR Status

PR Types

`org.springframework:spring-core`