`org.springframework:spring-framework-bom`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-framework-bom

Total PRs:
362 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
79 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Improper Input Validation in Spring Framework

GHSA-rv39-3qh7-9v7w CVE-2020-5421 MODERATE published about 5 years ago • updated 5 days ago

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the spring group across 4 directories with 8 updates

yuchen-osdu/search #16

6.2.18 → 6.2.19 Patch PR

Open 3 days ago 6 comments

Bump org.springframework:spring-framework-bom from 7.0.8-SNAPSHOT to 7.0.9-SNAPSHOT

spring-projects/spring-integration #11072

7.0.8-SNAPSHOT → 7.0.9-SNAPSHOT Patch PR

Closed about 1 month ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8

karianna/pcgen #209

7.0.7 → 7.0.8 Patch PR

Open about 2 months ago 2 comments

Build(deps): bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8

PCGen/pcgen #7591

7.0.7 → 7.0.8 Patch PR

Open about 2 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19

d3kum1d0r1y4100/spring-security #194

6.2.18 → 6.2.19 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the spring group across 4 directories with 4 updates

yuchen-osdu/partition #3

6.2.17 → 6.2.18 Patch PR

Open about 2 months ago 3 comments

Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6 in the spring-upgrade group

swedenconnect/bankid-saml-idp #340

7.0.5 → 7.0.6 Patch PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6

spring-projects/spring-ldap #1439

7.0.5 → 7.0.6 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17

RandomUserName-red/dependabot #143

6.2.16 → 6.2.17 Patch PR

Closed 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17

spring-projects/spring-pulsar #1441

6.2.16 → 6.2.17 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5

spring-projects/spring-security-samples #375

7.0.4 → 7.0.5 Patch PR

Closed 5 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.5

microsphere-projects/microsphere-java #242

7.0.3 → 7.0.5 Patch PR

Open 5 months ago 1 comment

Bump the spring group across 4 directories with 4 updates

danielscholl-osdu/legal #22

6.2.15 → 6.2.16 Patch PR

Open 5 months ago 9 comments

build(deps): bump the spring group across 4 directories with 4 updates

danielscholl-osdu/entitlements #24

6.2.15 → 6.2.16 Patch PR

Open 5 months ago 12 comments

Bump org.springframework:spring-framework-bom from 6.2.15 to 6.2.16

d3kum1d0r1y4100/spring-security #168

6.2.15 → 6.2.16 Patch PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.4

sebastian-toepfer/json-rpc #540

7.0.3 → 7.0.4 Patch PR

Open 5 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

microsphere-projects/microsphere-java #234

7.0.2 → 7.0.3 Patch PR

Open 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

zalando/logbook #2220

7.0.2 → 7.0.3 Patch PR

Open 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

microsphere-projects/microsphere-java #231

7.0.2 → 7.0.3 Patch PR

Open 6 months ago 1 comment

Bump the spring group across 4 directories with 3 updates

danielscholl-osdu/legal #15

6.2.14 → 6.2.15 Patch PR

Open 6 months ago 6 comments

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

spring-projects/spring-ldap #1342

7.0.2 → 7.0.3 Patch PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-framework-bom from 7.0.2 to 7.0.3

sebastian-toepfer/json-rpc #527

7.0.2 → 7.0.3 Patch PR

Open 6 months ago 1 comment

build(deps): bump the spring group across 4 directories with 3 updates

danielscholl-osdu/entitlements #29

6.2.14 → 6.2.15 Patch PR

Open 7 months ago 5 comments

Bump the spring group across 4 directories with 7 updates

danielscholl-osdu/search #22

6.1.16 → 6.1.21 Patch PR

Open 7 months ago 3 comments

Bump the core-dependencies group in /partition-core with 2 updates

danielscholl-osdu/partition #9

6.2.14 → 6.2.15 Patch PR

Open 7 months ago 2 comments

Bump the prod-deps group with 7 updates

kiwiproject/kiwi-bom #1431

7.0.1 → 7.0.2 Patch PR

Closed 7 months ago 1 comment

Bump the core-dependencies group across 1 directory with 10 updates

danielscholl-osdu/partition #17

6.2.14 → 6.2.15 Patch PR

Open 7 months ago 4 comments

Bump org.springframework:spring-framework-bom from 7.0.2-SNAPSHOT to 7.0.3-SNAPSHOT

spring-projects/spring-integration #10633

7.0.2-SNAPSHOT → 7.0.3-SNAPSHOT Patch PR

Closed 7 months ago 2 comments

build(deps): bump the maven-dependencies group with 9 updates

AxonFramework/AxonFramework #4025

6.2.14 → 6.2.15 Patch PR

Closed 7 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

d3kum1d0r1y4100/spring-security #153

6.2.14 → 6.2.15 Patch PR

Closed 7 months ago 1 comment

build(deps): bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

operaton/operaton #1835

6.2.14 → 6.2.15 Patch PR

Open 7 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.14 to 6.2.15

vividus-framework/vividus #6342

6.2.14 → 6.2.15 Patch PR

Open 8 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.14

RandomUserName-red/dependabot #114

6.2.12 → 6.2.14 Patch PR

Closed 8 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.14

vividus-framework/vividus #6305

6.2.12 → 6.2.14 Patch PR

Open 8 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.0 to 7.0.1

sebastian-toepfer/json-rpc #506

7.0.0 → 7.0.1 Patch PR

Open 8 months ago 1 comment

Bump the core-dependencies group in /partition-core with 16 updates

danielscholl-osdu/partition #10

6.2.12 → 6.2.14 Patch PR

Open 8 months ago 4 comments

build(deps): bump the maven-dependencies group with 4 updates

AxonFramework/AxonFramework #3935

6.2.12 → 6.2.13 Patch PR

Closed 8 months ago 3 comments

Bump org.springframework:spring-framework-bom from 7.0.0-SNAPSHOT to 7.0.1-SNAPSHOT

spring-projects/spring-integration #10580

7.0.0-SNAPSHOT → 7.0.1-SNAPSHOT Patch PR

Closed 8 months ago 2 comments

Bump org.springframework:spring-framework-bom from 7.0.0-SNAPSHOT to 7.0.1-SNAPSHOT

spring-projects/spring-kafka #4163

7.0.0-SNAPSHOT → 7.0.1-SNAPSHOT Patch PR

Closed 8 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.12 to 6.2.13

spring-projects/spring-ldap #1287

6.2.12 → 6.2.13 Patch PR

Closed 8 months ago 1 comment

build(deps): bump the maven-dependencies group across 1 directory with 27 updates

AxonFramework/AxonFramework #3876

6.2.11 → 6.2.12 Patch PR

Closed 9 months ago 1 comment

Bump the core-dependencies group in /partition-core with 15 updates

danielscholl-osdu/partition #16

6.2.9 → 6.2.12 Patch PR

Open 9 months ago 10 comments

Bump the spring group with 3 updates

danielscholl-osdu/partition #11

6.2.9 → 6.2.12 Patch PR

Open 9 months ago 8 comments

Bump the spring group with 3 updates

danielscholl-osdu/os-core-lib-azure #3

6.2.9 → 6.2.12 Patch PR

Open 9 months ago 4 comments

fix(deps): bump the prod-deps group across 1 directory with 28 updates

folio-org/mod-invoice #570

6.2.3 → 6.2.12 Patch PR

Closed 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.11 to 6.2.12

vividus-framework/vividus #6202

6.2.11 → 6.2.12 Patch PR

Open 9 months ago 2 comments

Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.12

Orange-OpenSource/spring-authorization-server #35

6.2.8 → 6.2.12 Patch PR

Open 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.12

6.2.7 → 6.2.12 Patch PR

Open 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.12

6.2.7 → 6.2.12 Patch PR

Open 9 months ago 1 comment

Bump org.springframework:spring-framework-bom from 6.2.11 to 6.2.12

spring-projects/spring-security #18068

6.2.11 → 6.2.12 Patch PR

Merged 9 months ago

Package Details

Name:	`org.springframework:spring-framework-bom`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-framework-bom`
JSON API:	View JSON

Security Advisories

1

Active advisories

MODERATE 1

View All maven Advisories

Package Information

Description:

Spring Framework (Bill of Materials)

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	12,288
Dependent Packages:	596
Ranking:	Top 0.0677% by dependent repos Top 0.1313% by dependent pkgs

PR Status

Open 157 (43.4%)

Merged 103 (28.5%)

Closed 80 (22.1%)

PR Types

Major 41 (11.3%)

Minor 23 (6.4%)

Patch 259 (71.5%)