`org.springframework:spring-framework-bom`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-framework-bom

Total PRs:
349 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
75 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Improper Input Validation in Spring Framework

GHSA-rv39-3qh7-9v7w CVE-2020-5421 MODERATE published about 5 years ago • updated 16 days ago

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against...

Recent PRs

Bump the dependencies group with 98 updates

theit/logging-log4j2 #296

5.3.25 → 7.0.7 Major PR

Closed about 1 month ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6 in the spring-upgrade group

swedenconnect/bankid-saml-idp #340

7.0.5 → 7.0.6 Patch PR

Closed 3 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6

spring-projects/spring-ldap #1439

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17

RandomUserName-red/dependabot #143

6.2.16 → 6.2.17 Patch PR

Closed 3 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17

spring-projects/spring-pulsar #1441

6.2.16 → 6.2.17 Patch PR

Open 3 months ago 1 comment

Bump the dependencies group across 1 directory with 58 updates

apache/logging-log4j2 #4055

6.2.9 → 7.0.5 Major PR

Closed 3 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5

spring-projects/spring-security-samples #375

7.0.4 → 7.0.5 Patch PR

Closed 3 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.5

microsphere-projects/microsphere-java #242

7.0.3 → 7.0.5 Patch PR

Open 4 months ago 1 comment

fix(deps): bump org.springframework:spring-framework-bom from 5.3.39 to 7.0.4

vegardit/no-npe #511

5.3.39 → 7.0.4 Major PR

Closed 4 months ago 1 comment

Bump the spring group across 4 directories with 4 updates

danielscholl-osdu/legal #22

6.2.15 → 6.2.16 Patch PR

Open 4 months ago 9 comments

build(deps): bump the spring group across 4 directories with 4 updates

danielscholl-osdu/entitlements #24

6.2.15 → 6.2.16 Patch PR

Open 4 months ago 12 comments

Bump org.springframework:spring-framework-bom from 6.2.15 to 6.2.16

d3kum1d0r1y4100/spring-security #168

6.2.15 → 6.2.16 Patch PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.4

sebastian-toepfer/json-rpc #540

7.0.3 → 7.0.4 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

microsphere-projects/microsphere-java #234

7.0.2 → 7.0.3 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

zalando/logbook #2220

7.0.2 → 7.0.3 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

microsphere-projects/microsphere-java #231

7.0.2 → 7.0.3 Patch PR

Open 4 months ago 1 comment

Bump the spring group across 4 directories with 3 updates

danielscholl-osdu/legal #15

6.2.14 → 6.2.15 Patch PR

Open 4 months ago 6 comments

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

spring-projects/spring-ldap #1342

7.0.2 → 7.0.3 Patch PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.0.0 to 7.0.3

hazelcast-guides/spring-session-hazelcast #129

6.0.0 → 7.0.3 Major PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.3

CoreMedia/coremedia-headless-commerce #381

6.2.12 → 7.0.3 Major PR

Closed 5 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

sebastian-toepfer/json-rpc #527

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.0.0 to 7.0.2

hazelcast-guides/spring-session-hazelcast #128

6.0.0 → 7.0.2 Major PR

Closed 5 months ago 1 comment

build(deps): bump the spring group across 4 directories with 3 updates

danielscholl-osdu/entitlements #29

6.2.14 → 6.2.15 Patch PR

Open 5 months ago 5 comments

Bump the spring group across 4 directories with 7 updates

danielscholl-osdu/search #22

6.1.16 → 6.1.21 Patch PR

Open 5 months ago 3 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.2

CoreMedia/coremedia-headless-commerce #376

6.2.12 → 7.0.2 Major PR

Closed 5 months ago 3 comments

Bump the core-dependencies group in /partition-core with 2 updates

danielscholl-osdu/partition #9

6.2.14 → 6.2.15 Patch PR

Open 6 months ago 2 comments

Bump the prod-deps group with 7 updates

kiwiproject/kiwi-bom #1431

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

build(deps): bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.2

apache/struts #1475

6.2.12 → 7.0.2 Major PR

Open 6 months ago 2 comments

Bump the core-dependencies group across 1 directory with 10 updates

danielscholl-osdu/partition #17

6.2.14 → 6.2.15 Patch PR

Open 6 months ago 4 comments

Bump org.springframework:spring-framework-bom from 7.0.2-SNAPSHOT to 7.0.3-SNAPSHOT

spring-projects/spring-integration #10633

7.0.2-SNAPSHOT → 7.0.3-SNAPSHOT Patch PR

Closed 6 months ago 2 comments

build(deps): bump the maven-dependencies group with 9 updates

AxonFramework/AxonFramework #4025

6.2.14 → 6.2.15 Patch PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

d3kum1d0r1y4100/spring-security #153

6.2.14 → 6.2.15 Patch PR

Closed 6 months ago 1 comment

build(deps): bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

operaton/operaton #1835

6.2.14 → 6.2.15 Patch PR

Open 6 months ago 2 comments

Bump the dependencies group with 55 updates

apache/logging-log4j2 #4000

6.2.9 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

vividus-framework/vividus #6342

6.2.14 → 6.2.15 Patch PR

Open 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1

dsp-testing/maven-ryan-transitive #1

6.2.12 → 7.0.1 Major PR

Closed 6 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 30 updates

folio-org/mod-invoice #575

6.2.3 → 7.0.1 Major PR

Closed 6 months ago 1 comment

build(deps): bump the spring-framework group with 3 updates

samehinttech/diving-courses-trips-logbook-project #16

6.2.10 → 7.0.1 Major PR

Closed 6 months ago 3 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1

entur/jwt-resource-server #205

6.2.12 → 7.0.1 Major PR

Open 6 months ago 2 comments

chore(deps): bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1 in /backend

Vault-Web/vault-web #125

6.2.12 → 7.0.1 Major PR

Closed 6 months ago 1 comment

build(deps): bump the spring-framework group with 3 updates

samehinttech/diving-courses-trips-logbook-project #11

6.2.10 → 7.0.1 Major PR

Open 6 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.14

RandomUserName-red/dependabot #114

6.2.12 → 6.2.14 Patch PR

Closed 6 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.14

vividus-framework/vividus #6305

6.2.12 → 6.2.14 Patch PR

Open 7 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.0 to 7.0.1

sebastian-toepfer/json-rpc #506

7.0.0 → 7.0.1 Patch PR

Open 7 months ago 1 comment

Bump the azure-dependencies group in /provider/search-azure with 33 updates

danielscholl-osdu/search #9

6.1.16 → 7.0.1 Major PR

Open 7 months ago 3 comments

Bump the core-dependencies group in /partition-core with 16 updates

danielscholl-osdu/partition #10

6.2.12 → 6.2.14 Patch PR

Open 7 months ago 4 comments

Bump the core-dependencies group in /file-core with 30 updates

danielscholl-osdu/file #8

6.1.16 → 6.2.14 Minor PR

Open 7 months ago 3 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1

wildfly-clustering/wildfly-clustering-spring #405

6.2.12 → 7.0.1 Major PR

Closed 7 months ago 1 comment

build(deps): bump the maven-dependencies group with 4 updates

AxonFramework/AxonFramework #3935

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 3 comments

Bump the azure-dependencies group across 1 directory with 14 updates

danielscholl-osdu/indexer #28

6.1.16 → 7.0.0 Major PR

Open 7 months ago 3 comments

Package Details

Name:	`org.springframework:spring-framework-bom`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-framework-bom`
JSON API:	View JSON

Security Advisories

1

Active advisories

MODERATE 1

View All maven Advisories

Package Information

Description:

Spring Framework (Bill of Materials)

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	12,288
Dependent Packages:	596
Ranking:	Top 0.0677% by dependent repos Top 0.1313% by dependent pkgs

PR Status

Open 149 (42.7%)

Merged 100 (28.7%)

Closed 78 (22.3%)

PR Types

Major 41 (11.7%)

Minor 23 (6.6%)

Patch 246 (70.5%)