`org.springframework:spring-framework-bom`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-framework-bom

Total PRs:
361 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
78 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Improper Input Validation in Spring Framework

GHSA-rv39-3qh7-9v7w CVE-2020-5421 MODERATE published about 5 years ago • updated 26 days ago

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against...

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

Bump org.springframework:spring-framework-bom from 7.0.8-SNAPSHOT to 7.0.9-SNAPSHOT

spring-projects/spring-integration #11072

7.0.8-SNAPSHOT → 7.0.9-SNAPSHOT Patch PR

Closed 5 days ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19

d3kum1d0r1y4100/spring-security #194

6.2.18 → 6.2.19 Patch PR

Closed 6 days ago 1 comment

Bump the dependencies group with 98 updates

theit/logging-log4j2 #296

5.3.25 → 7.0.7 Major PR

Closed about 2 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6 in the spring-upgrade group

swedenconnect/bankid-saml-idp #340

7.0.5 → 7.0.6 Patch PR

Closed 3 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17

RandomUserName-red/dependabot #143

6.2.16 → 6.2.17 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 58 updates

apache/logging-log4j2 #4055

6.2.9 → 7.0.5 Major PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5

spring-projects/spring-security-samples #375

7.0.4 → 7.0.5 Patch PR

Closed 4 months ago 2 comments

fix(deps): bump org.springframework:spring-framework-bom from 5.3.39 to 7.0.4

vegardit/no-npe #511

5.3.39 → 7.0.4 Major PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.15 to 6.2.16

d3kum1d0r1y4100/spring-security #168

6.2.15 → 6.2.16 Patch PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

spring-projects/spring-ldap #1342

7.0.2 → 7.0.3 Patch PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.0.0 to 7.0.3

hazelcast-guides/spring-session-hazelcast #129

6.0.0 → 7.0.3 Major PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.3

CoreMedia/coremedia-headless-commerce #381

6.2.12 → 7.0.3 Major PR

Closed 5 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.0.0 to 7.0.2

hazelcast-guides/spring-session-hazelcast #128

6.0.0 → 7.0.2 Major PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.2

CoreMedia/coremedia-headless-commerce #376

6.2.12 → 7.0.2 Major PR

Closed 6 months ago 3 comments

Bump the prod-deps group with 7 updates

kiwiproject/kiwi-bom #1431

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2-SNAPSHOT to 7.0.3-SNAPSHOT

spring-projects/spring-integration #10633

7.0.2-SNAPSHOT → 7.0.3-SNAPSHOT Patch PR

Closed 6 months ago 2 comments

build(deps): bump the maven-dependencies group with 9 updates

AxonFramework/AxonFramework #4025

6.2.14 → 6.2.15 Patch PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

d3kum1d0r1y4100/spring-security #153

6.2.14 → 6.2.15 Patch PR

Closed 6 months ago 1 comment

Bump the dependencies group with 55 updates

apache/logging-log4j2 #4000

6.2.9 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1

dsp-testing/maven-ryan-transitive #1

6.2.12 → 7.0.1 Major PR

Closed 6 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 30 updates

folio-org/mod-invoice #575

6.2.3 → 7.0.1 Major PR

Closed 6 months ago 1 comment

build(deps): bump the spring-framework group with 3 updates

samehinttech/diving-courses-trips-logbook-project #16

6.2.10 → 7.0.1 Major PR

Closed 7 months ago 3 comments

chore(deps): bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1 in /backend

Vault-Web/vault-web #125

6.2.12 → 7.0.1 Major PR

Closed 7 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.14

RandomUserName-red/dependabot #114

6.2.12 → 6.2.14 Patch PR

Closed 7 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.1

wildfly-clustering/wildfly-clustering-spring #405

6.2.12 → 7.0.1 Major PR

Closed 7 months ago 1 comment

build(deps): bump the maven-dependencies group with 4 updates

AxonFramework/AxonFramework #3935

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 3 comments

Bump org.springframework:spring-framework-bom from 7.0.0-SNAPSHOT to 7.0.1-SNAPSHOT

spring-projects/spring-integration #10580

7.0.0-SNAPSHOT → 7.0.1-SNAPSHOT Patch PR

Closed 7 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.0-SNAPSHOT to 7.0.1-SNAPSHOT

spring-projects/spring-kafka #4163

7.0.0-SNAPSHOT → 7.0.1-SNAPSHOT Patch PR

Closed 7 months ago 2 comments

deps: bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.0

fluxzero-io/fluxzero-sdk-java #55

6.2.12 → 7.0.0 Major PR

Closed 7 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.13

spring-projects/spring-ldap #1287

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 7.0.0

vividus-framework/vividus #6271

6.2.12 → 7.0.0 Major PR

Closed 7 months ago 2 comments

build(deps): bump the maven-dependencies group across 1 directory with 27 updates

AxonFramework/AxonFramework #3876

6.2.11 → 6.2.12 Patch PR

Closed 7 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 28 updates

folio-org/mod-invoice #570

6.2.3 → 6.2.12 Patch PR

Closed 8 months ago 1 comment

chore(deps): bump org.springframework:spring-framework-bom from 5.3.17 to 6.2.12

Grandolf49/fineract #1110

5.3.17 → 6.2.12 Major PR

Closed 8 months ago 3 comments

Bump org.springframework:spring-framework-bom from 7.0.0-M9 to 7.0.0-RC1

spring-projects/spring-pulsar #1288

7.0.0-M9 → 7.0.0-RC1

Closed 8 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.0-M8 to 7.0.0-M9

spring-projects/spring-authorization-server #2192

7.0.0-M8 → 7.0.0-M9

Closed 9 months ago

Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.11

spring-projects/spring-security-kerberos #322

6.2.8 → 6.2.11 Patch PR

Closed 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 5.3.31 to 6.2.11

microsphere-projects/microsphere-java #189

5.3.31 → 6.2.11 Major PR

Closed 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.0-M8 to 7.0.0-SNAPSHOT

spring-projects/spring-integration #10353

7.0.0-M8 → 7.0.0-SNAPSHOT

Closed 10 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.3 to 6.2.10

MemoryLeakDeath/magenta-breeze-war #129

6.2.3 → 6.2.10 Patch PR

Closed 10 months ago 1 comment

Bump org.springframework:spring-framework-bom from 5.3.37 to 6.2.10

msukhum/evcentral3712 #11

5.3.37 → 6.2.10 Major PR

Closed 10 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.10

Orange-OpenSource/spring-authorization-server #18

6.2.8 → 6.2.10 Patch PR

Closed 10 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.10

giongy/aa #35

6.2.7 → 6.2.10 Patch PR

Closed 10 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.10

spring-projects/spring-security-kerberos #316

6.2.8 → 6.2.10 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump org.springframework:spring-framework-bom from 5.3.17 to 6.2.10

Grandolf49/fineract #1077

5.3.17 → 6.2.10 Major PR

Closed 10 months ago 1 comment

Bump org.springframework:spring-framework-bom from 5.3.31 to 6.2.10

microsphere-projects/microsphere-java #184

5.3.31 → 6.2.10 Major PR

Closed 10 months ago 1 comment

Bump the maven group across 6 directories with 11 updates

offsoc/dubbo #3

3.2.18.RELEASE → 4.3.29.RELEASE Major PR

Closed 10 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 23 updates

folio-org/mod-invoice #558

6.2.3 → 6.2.9 Patch PR

Closed 10 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 23 updates

folio-org/mod-invoice #554

6.2.3 → 6.2.9 Patch PR

Closed 10 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.3 to 6.2.9

MemoryLeakDeath/magenta-breeze-war #128

6.2.3 → 6.2.9 Patch PR

Closed 11 months ago 1 comment

Package Details

Name:	`org.springframework:spring-framework-bom`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-framework-bom`
JSON API:	View JSON

Security Advisories

1

Active advisories

MODERATE 1

View All maven Advisories

Package Information

Description:

Spring Framework (Bill of Materials)

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	12,288
Dependent Packages:	596
Ranking:	Top 0.0677% by dependent repos Top 0.1313% by dependent pkgs

PR Status

Open 156 (43.2%)

Merged 103 (28.5%)

Closed 80 (22.2%)

PR Types

Major 41 (11.4%)

Minor 23 (6.4%)

Patch 258 (71.5%)