`org.springframework:spring-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-core

Total PRs:
447 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
205 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

GHSA-wv88-pf73-x22p CVE-2011-2730 HIGH published about 4 years ago • updated about 22 hours ago

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), eva...

View all 18 advisories

Recent PRs (filtered by: Merged )

RSS Feed Clear filter

Bump org.springframework:spring-core from 6.2.11 to 6.2.12

feuyeux/hello-cache #178

6.2.11 → 6.2.12 Patch PR

Merged 8 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

tresat/gh-universe-demo #1

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump the spring group with 28 updates

DSpace/DSpace #11391

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump the spring group with 25 updates

DSpace/DSpace #11373

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

build: bump org.springframework:spring-core from 5.3.37 to 5.3.39

fast-excel/fesod #595

5.3.37 → 5.3.39 Patch PR

Merged 9 months ago 1 comment

Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #68

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

build(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

obiba/opal #4055

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

craftercms/craftercms #8357

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

Bump org.springframework:spring-core from 6.2.1 to 6.2.11

sweta-1011/spring-jms-sender #8

6.2.1 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.1 to 6.2.11

sweta-1011/spring-jms-receiver #8

6.2.1 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.7 to 6.2.11

bootique/bootique-job #131

6.2.7 → 6.2.11 Patch PR

Merged 9 months ago

chore(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

citrusframework/citrus #1409

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.9 to 6.2.11

ops4j/org.ops4j.pax.web #2100

6.2.9 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

apache/activemq #1494

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump the all-maven-deps group across 2 directories with 46 updates

craftercms/craftercms #8353

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

chore(deps): bump org.springframework:spring-core from 6.2.8 to 6.2.11

binaryeq/daleq #75

6.2.8 → 6.2.11 Patch PR

Merged 9 months ago

Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in /mappingservice-plugin

kit-data-manager/tomo_mapper #84

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

build: bump org.springframework:spring-core from 6.2.10 to 6.2.11

tzok/mcq4structures #437

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

build(deps): Bump org.springframework:spring-core from 6.2.10 to 6.2.11

vmware/build-tools-for-vmware-aria #858

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

Bump org.springframework:spring-core from 6.2.10 to 6.2.11

mars-sim/mars-sim #1736

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore: bump org.springframework:spring-core from 6.2.10 to 6.2.11

sarananivsh/helloworld3 #149

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore: bump org.springframework:spring-core from 6.2.10 to 6.2.11

sarananivsh/helloworld4 #174

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

chore(deps): 依赖项升级[org.springframework:spring-core][6.2.10 => 6.2.11]

ACANX/MetaOpen #279

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #66

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

Bump the all-maven-deps group across 3 directories with 34 updates

craftercms/craftercms #8330

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #545

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

Bump org.springframework:spring-core from 6.2.9 to 6.2.10

spring-projects/spring-ldap #1195

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

Bump org.springframework:spring-core from 6.2.9 to 6.2.10

feuyeux/hello-cache #153

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

Bump org.springframework:spring-core from 6.2.9 to 6.2.10

spring-projects/spring-ldap #1183

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

chore: bump org.springframework:spring-core from 6.2.9 to 6.2.10

sarananivsh/helloworld3 #135

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

chore(deps): bump org.springframework:spring-core from 6.2.9 to 6.2.10 in /os-dependencies

ACANX/MetaOpen #171

6.2.9 → 6.2.10 Patch PR

Merged 10 months ago

Bump the all-maven-deps group across 3 directories with 62 updates

craftercms/craftercms #8310

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the all-minor-patch group across 1 directory with 48 updates

navikt/tilbakemeldingsmottak-api #283

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

build(deps): Bump org.springframework:spring-core from 6.2.8 to 6.2.9

vmware/build-tools-for-vmware-aria #804

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 25 updates

DSpace/DSpace #11095

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11093

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11086

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

chore: [DevOps] bump the production-minor-patch group with 14 updates

SAP/ai-sdk-java #516

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

build: bump org.springframework:spring-core from 6.2.8 to 6.2.9

tzok/mcq4structures #413

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump org.springframework:spring-core from 6.2.8 to 6.2.9

PCGen/pcgen #7376

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago 1 comment

Bump org.springframework:spring-core from 6.2.8 to 6.2.9

feuyeux/hello-cache #147

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

chore(deps): bump org.springframework:spring-core from 6.2.8 to 6.2.9 in /os-dependencies

ACANX/MetaOpen #46

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago 1 comment

Bump org.springframework:spring-core from 6.2.7 to 6.2.9

spring-projects/spring-ldap #1131

6.2.7 → 6.2.9 Patch PR

Merged 11 months ago

chore: bump org.springframework:spring-core from 6.2.8 to 6.2.9

sarananivsh/helloworld2 #125

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 25 updates

DSpace/DSpace #10946

6.2.7 → 6.2.8 Patch PR

Merged 12 months ago

Bump the maven group across 3 directories with 5 updates

DVSB/openthinclient-suite #1

1.2.8 → 4.3.20.RELEASE Major PR

Merged about 1 year ago

chore(deps): bump the spring group across 3 directories with 6 updates

aws/serverless-java-container #1464

6.2.6 → 6.2.8 Patch PR

Merged about 1 year ago

Bump the spring group with 12 updates

DSpace/DSpace #10903

6.2.7 → 6.2.8 Patch PR

Merged about 1 year ago

Bump the maven-dependencies group with 5 updates

AxonFramework/extension-spring-aot #228

6.2.7 → 6.2.8 Patch PR

Merged about 1 year ago 1 comment

Bump org.springframework:spring-core from 6.2.7 to 6.2.8

feuyeux/hello-cache #135

6.2.7 → 6.2.8 Patch PR

Merged about 1 year ago

Package Details

Name:	`org.springframework:spring-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-core`
JSON API:	View JSON

Security Advisories

18

Active advisories

HIGH 8

MODERATE 10

View All maven Advisories

Package Information

Description:

Spring Core

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	157,893
Dependent Packages:	6,691
Ranking:	Top 0.0048% by dependent repos Top 0.009% by dependent pkgs

PR Status

Open 214 (47.9%)

Merged 79 (17.7%)

Closed 131 (29.3%)

PR Types

Major 111 (24.8%)

Minor 34 (7.6%)

Patch 279 (62.4%)

org.springframework:spring-core

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Denial of Service in org.springframework:spring-core

Log entry injection in Spring Framework

Recent PRs (filtered by: Merged )

Package Details

Security Advisories

18

Package Information

PR Status

PR Types

`org.springframework:spring-core`