An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
886 Dependabot PRs
Latest PR:
10 days ago
Unique Repositories:
435 repositories
Unique Repos (30 days):
7 repositories
Security Advisories
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published almost 2 years ago • updated 3 days ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Pivotal Spring Framework DoS Attack with XML Input
GHSA-6v7w-535j-rq5m CVE-2015-3192 MODERATE published about 7 years ago • updated about 1 month ago
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, whic...
Spring Framework URL Parsing with Host Validation
GHSA-2wrp-6fg6-hmc5 CVE-2024-22262 HIGH published over 1 year ago • updated 4 days ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Spring Framework DataBinder Case Sensitive Match Exception
GHSA-4gc7-5j7h-4qph CVE-2024-38820 MODERATE published about 1 year ago • updated 4 days ago
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent e...
Improper Neutralization of Input During Web Page Generation in Spring Framework
GHSA-xjrf-8x4f-43h4 CVE-2013-6430 MODERATE published over 3 years ago • updated 28 days ago
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escap...
Recent PRs
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
8 months ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 396 (44.7%)
Merged 185 (20.9%)
Closed 227 (25.6%)
PR Types
Major 249 (28.1%)
Patch 497 (56.1%)
Minor 62 (7.0%)