`org.springframework:spring-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-core

Total PRs:
447 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
205 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 3 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Denial of Service in org.springframework:spring-core

GHSA-rcpf-vj53-7h2m CVE-2018-1257 MODERATE published over 7 years ago • updated 29 days ago

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP...

Log entry injection in Spring Framework

GHSA-6gf2-pvqw-37ph CVE-2021-22060 MODERATE published over 4 years ago • updated 11 days ago

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input t...

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

GHSA-f866-m9mv-2xr3 CVE-2011-2894 MODERATE published about 4 years ago • updated about 2 hours ago

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects ...

Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core

GHSA-v596-fwhq-8x48 CVE-2018-1199 MODERATE published over 7 years ago • updated 2 days ago

Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x...

View all 18 advisories

Recent PRs

RSS Feed

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.7

Skarlso/gocd #2316

4.3.30.RELEASE → 6.2.7 Major PR

Open about 1 year ago

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.7

isaka/gocd #1098

4.3.30.RELEASE → 6.2.7 Major PR

Open about 1 year ago

build(deps): Bump org.springframework:spring-core from 6.2.6 to 6.2.7

vmware/build-tools-for-vmware-aria #723

6.2.6 → 6.2.7 Patch PR

Open about 1 year ago

Bump org.springframework:spring-core from 6.2.6 to 6.2.7

PCGen/pcgen #7328

6.2.6 → 6.2.7 Patch PR

Open about 1 year ago 1 comment

Bump org.springframework:spring-core from 6.2.6 to 6.2.7

feuyeux/hello-cache #121

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

Bump org.springframework:spring-core from 6.1.8 to 6.1.20

Incredidev9285/spring-security #10

6.1.8 → 6.1.20 Patch PR

Open about 1 year ago 2 comments

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.7

gocd/gocd #13660

4.3.30.RELEASE → 6.2.7 Major PR

Open about 1 year ago

Bump org.springframework:spring-core from 6.2.6 to 6.2.7

LarsEckart/learning-hour-only-mock-types-that-you-own #181

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

chore: bump org.springframework:spring-core from 6.2.6 to 6.2.7

sarananivsh/helloworld3 #89

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

chore: bump org.springframework:spring-core from 6.2.6 to 6.2.7

sarananivsh/helloworld4 #113

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #58

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

Bump org.springframework:spring-core from 6.2.6 to 6.2.7

spring-projects/spring-ldap #1097

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

Bump org.springframework:spring-core from 6.1.19 to 6.1.20

spring-projects/spring-ldap #1093

6.1.19 → 6.1.20 Patch PR

Merged about 1 year ago

chore: bump org.springframework:spring-core from 6.2.6 to 6.2.7

sarananivsh/helloworld6 #134

6.2.6 → 6.2.7 Patch PR

Open about 1 year ago

Bump org.springframework:spring-core from 6.2.3 to 6.2.7

2dgirlismywaifu/My-REST-Services #111

6.2.3 → 6.2.7 Patch PR

Merged about 1 year ago

chore: bump org.springframework:spring-core from 6.2.6 to 6.2.7

sarananivsh/helloworld2 #88

6.2.6 → 6.2.7 Patch PR

Merged about 1 year ago

Bump org.springframework:spring-core from 6.2.6 to 6.2.7

quarkiverse/quarkus-mybatis #576

6.2.6 → 6.2.7 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 6.2.3 to 6.2.7

reactor/projectreactor.io #207

6.2.3 → 6.2.7 Patch PR

Open about 1 year ago 1 comment

Bump org.springframework:spring-core from 4.3.13.RELEASE to 6.2.7

jayanthielangoTR/JTest #9

4.3.13.RELEASE → 6.2.7 Major PR

Open about 1 year ago

Bump the maven group across 11 directories with 16 updates

alokkulkarni/tutorials #1

4.3.4.RELEASE → 4.3.29.RELEASE Patch PR

Open about 1 year ago

Bump the maven group across 2 directories with 2 updates

alokkulkarni/spring-cloud-dataflow #1

4.2.6.RELEASE → 4.3.20.RELEASE Minor PR

Open about 1 year ago

Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #57

6.2.3 → 6.2.6 Patch PR

Merged about 1 year ago

Bump the maven group across 2 directories with 23 updates

sundaramoorthym/kylin #1

4.3.10.RELEASE → 6.2.6 Major PR

Open about 1 year ago

Bump the maven group across 1 directory with 8 updates

offsoc/Mshell #2

3.2.3.RELEASE → 3.2.9.RELEASE Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 6.2.3 to 6.2.6

reactor/projectreactor.io #206

6.2.3 → 6.2.6 Patch PR

Closed about 1 year ago 2 comments

Bump org.springframework:spring-core from 5.3.5 to 5.3.14 in /contrib/datawave-utils/read-properties

NationalSecurityAgency/datawave #2886

5.3.5 → 5.3.14 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.6

isaka/gocd #1067

4.3.30.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 1 comment

Bump the all-minor-patch group with 41 updates

navikt/tilbakemeldingsmottak-api #276

6.2.5 → 6.2.6 Patch PR

Merged about 1 year ago

Bump the all-minor-patch group across 1 directory with 14 updates

ehrbase/openEHR_SDK #674

6.2.2 → 6.2.6 Patch PR

Open about 1 year ago 3 comments

chore: bump the production-minor-patch group across 1 directory with 8 updates

SAP/btp-environment-variable-access #280

6.2.5 → 6.2.6 Patch PR

Open about 1 year ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.6

v0rts/gocd #1279

4.3.30.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 2 comments

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.6

Skarlso/gocd #2273

4.3.30.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.6

Mu-L/gocd #2550

4.3.30.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 6.2.6

gocd/gocd #13600

4.3.30.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 1 comment

Bump org.springframework:spring-core from 6.1.8 to 6.1.19

Incredidev9285/spring-security #6

6.1.8 → 6.1.19 Patch PR

Closed about 1 year ago 2 comments

Bump org.springframework:spring-core from 4.3.13.RELEASE to 6.2.6

jayanthielangoTR/JTest #8

4.3.13.RELEASE → 6.2.6 Major PR

Closed about 1 year ago 1 comment

chore(deps): bump org.springframework:spring-core from 6.2.0 to 6.2.5

power4j/coca-kit #232

6.2.0 → 6.2.5 Patch PR

Closed over 1 year ago 1 comment

Bump the spring group across 1 directory with 25 updates

abhijeetb-code/dspace #10

6.2.3 → 6.2.4 Patch PR

Open over 1 year ago 1 comment

Bump the dev-dependencies group across 1 directory with 16 updates

NASA-PDS/registry-legacy-solr #192

6.1.14 → 6.2.3 Minor PR

Open over 1 year ago 2 comments

Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #56

6.2.2 → 6.2.3 Patch PR

Merged over 1 year ago

chore(deps-dev): bump org.springframework:spring-core from 5.3.39 to 6.2.1 in /assertj-core in the maven group across 1 directory

assertj/assertj #3721

5.3.39 → 6.2.1 Major PR

Closed over 1 year ago

Bump org.springframework:spring-core from 6.1.8 to 6.1.16

spring-projects/spring-security-kerberos #276

6.1.8 → 6.1.16 Patch PR

Merged over 1 year ago

chore(deps-dev): bump org.springframework:spring-core from 5.3.39 to 6.0.0 in the maven group

assertj/assertj #3688

5.3.39 → 6.0.0 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-core from 6.1.13 to 6.1.14 in /ebs-spring-hibernate

get2mandar/javabeginner #21

6.1.13 → 6.1.14 Patch PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-core from 6.0.19 to 6.1.14

nagendra1991/kcm #17

6.0.19 → 6.1.14 Minor PR

Merged over 1 year ago

Bump org.springframework:spring-core from 6.0.16 to 6.1.14 in /JavaEdge

haldokan/JavaEdge #30

6.0.16 → 6.1.14 Minor PR

Merged over 1 year ago

Bump org.springframework:spring-core from 6.0.16 to 6.1.14 in /poc_xcf

gdimitriu/poc_apis #19

6.0.16 → 6.1.14 Minor PR

Merged over 1 year ago

Bump org.springframework:spring-core from 6.0.19 to 6.1.14 in /wystri-examples

ronaldtm/wystriframework #25

6.0.19 → 6.1.14 Minor PR

Merged over 1 year ago

build(deps): bump org.springframework:spring-core from 5.3.39 to 6.1.14 in /bom

albfernandez/jboss-seam #218

5.3.39 → 6.1.14 Major PR

Closed over 1 year ago

Bump org.springframework:spring-core from 5.3.37 to 6.1.14 in /geoportal-application/geoportal-harvester-war

Esri/geoportal-server-harvester #234

5.3.37 → 6.1.14 Major PR

Closed over 1 year ago 1 comment

Package Details

Name:	`org.springframework:spring-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-core`
JSON API:	View JSON

Security Advisories

18

Active advisories

HIGH 8

MODERATE 10

View All maven Advisories

Package Information

Description:

Spring Core

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	157,893
Dependent Packages:	6,691
Ranking:	Top 0.0048% by dependent repos Top 0.009% by dependent pkgs

PR Status

Open 214 (47.9%)

Merged 79 (17.7%)

Closed 131 (29.3%)

PR Types

Major 111 (24.8%)

Minor 34 (7.6%)

Patch 279 (62.4%)