Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 1 day ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 1 day ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 1 day ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated 11 minutes ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 2 days ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
View all 12 advisories
Recent PRs
RSS Feed
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

datasharingframework/dsf #330

6.2.7 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
datasharingframework
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8

citrusframework/citrus #1358

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
citrusframework
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /core

majeff/showme #36

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
majeff
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /examples/example-simple

camunda-community-hub/camunda-platform-7-custom-batch #139

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
camunda-community-hub
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

Chrimle/openapi-to-java-records-mustache-templates #453

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
Chrimle
build(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21

vrnsky/java-a-to-z #89

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
vrnsky
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /tests/springutils

mihxil/i18n-regions #6

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
mihxil
chore(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21

avenirs-esr/avenirs-portfolio-security #7

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
avenirs-esr
Bump org.springframework:spring-web from 6.0.19 to 6.1.21 in /org.eclipse.winery.generators.ia/src/main/resources/template/project

winery/winery #772

6.0.19 → 6.1.21 Minor PR
Open about 1 year ago
winery
build(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8

apache/axis-axis2-java-core #944

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
apache
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /goobi-viewer-core

intranda/goobi-viewer-core #61

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
intranda
build(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8

membrane/api-gateway #1900

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago 2 comments
membrane
chore(deps): bump org.springframework:spring-web from 6.2.6 to 6.2.8 in /examples/example-webapp

okta/okta-auth-java #738

6.2.6 → 6.2.8 Patch PR
Open about 1 year ago
okta
Bump org.springframework:spring-web from 6.1.13 to 6.1.21

binarywang/weixin-java-mp-demo-springmvc #44

6.1.13 → 6.1.21 Patch PR
Merged about 1 year ago
binarywang
build(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8

obiba/opal #4030

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
obiba
Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /client

SAP/java-integration-for-sap-mobile-services #603

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago
SAP
Bump org.springframework:spring-web from 6.1.13 to 6.1.21

vall-ball/school01 #52

6.1.13 → 6.1.21 Patch PR
Open about 1 year ago
vall-ball
Bump org.springframework:spring-web from 6.2.5 to 6.2.8

companieshouse/acsp-api #231

6.2.5 → 6.2.8 Patch PR
Open about 1 year ago
companieshouse
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

oracle/coherence-spring-sockshop-sample #262

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago 1 comment
oracle
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

dromara/mybatis-jpa-extra #51

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
dromara
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

zenbones/SmallMind #61

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
zenbones
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.8 in /rest-angular

apache/struts-examples #466

6.2.5 → 6.2.8 Patch PR
Open about 1 year ago 2 comments
apache
Bump org.springframework:spring-web from 6.2.6 to 6.2.8 in the maven group

FME-MS/fme-api #8

6.2.6 → 6.2.8 Patch PR
Open about 1 year ago
FME-MS
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /server in the maven group across 1 directory

google/fhir-gateway #415

6.2.7 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
google
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in the maven group

olech2412/db-vendo-wrapper #9

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
olech2412
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

apache/activemq #1456

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
apache
Bump org.springframework:spring-web from 6.2.5 to 6.2.8 in /generated-platform-project/quarkus-camel/bom

quarkusio/quarkus-platform #1514

6.2.5 → 6.2.8 Patch PR
Open about 1 year ago 2 comments
quarkusio
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

cloudfoundry/multiapps-controller #1650

6.2.7 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
cloudfoundry
Bump org.springframework:spring-web from 6.2.6 to 6.2.8

wicketstuff/core #1222

6.2.6 → 6.2.8 Patch PR
Closed about 1 year ago 2 comments
wicketstuff
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in the maven group

vasac/coherence-spring #40

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
vasac
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8

eclipse-sw360/sw360 #3218

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
eclipse-sw360
Bump org.springframework:spring-web from 6.2.6 to 6.2.8

companieshouse/emergency-auth-code-web #128

6.2.6 → 6.2.8 Patch PR
Open about 1 year ago 2 comments
companieshouse
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

swiftech/swiftboot #19

6.2.7 → 6.2.8 Patch PR
Closed about 1 year ago
swiftech
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /dashgit-updater

javiertuya/dashgit #189

6.2.7 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
javiertuya
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

apache/wicket #1187

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
apache
Bump org.springframework:spring-web from 6.2.6 to 6.2.8 in /spring-web-6.2.6

apache/servicemix-bundles #291

6.2.6 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
apache
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

UnitVectorY-Labs/jsonschema4springboot #114

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
UnitVectorY-Labs
build(deps): bump org.springframework:spring-web from 6.2.6 to 6.2.8

DelineaXPM/tss-sdk-java #172

6.2.6 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
DelineaXPM
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

coherence-community/coherence-spring #659

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
coherence-community
SONARJAVA-5623 Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /java-checks-test-sources/spring-3.2

SonarSource/sonar-java #5192

6.1.12 → 6.1.21 Patch PR
Closed about 1 year ago 4 comments
SonarSource
Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /zxingorg

zxing/zxing #1952

6.1.12 → 6.1.21 Patch PR
Closed about 1 year ago 1 comment
zxing
Bump org.springframework:spring-web from 6.1.12 to 6.1.21

companieshouse/psc-filing-api #118

6.1.12 → 6.1.21 Patch PR
Closed about 1 year ago 3 comments
companieshouse
Bump org.springframework:spring-web from 6.2.3 to 6.2.8 in /ride-management in the maven group across 1 directory

trivuniceva/Ride-App #57

6.2.3 → 6.2.8 Patch PR
Merged about 1 year ago
trivuniceva
Build(deps): Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /moesif-springrequest

Moesif/moesif-servlet #142

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago
Moesif
Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /home/rssfiz.show

rodakw/rssfiz #16

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago
rodakw
Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /zxingorg

jhanley634/zxing #9

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago 1 comment
jhanley634
Bump org.springframework:spring-web from 6.1.12 to 6.1.21

oxctl/canvas-spring-oauth2 #13

6.1.12 → 6.1.21 Patch PR
Merged about 1 year ago
oxctl
Bump org.springframework:spring-web from 6.2.3 to 6.2.8

DtsvnProj/craftercms #6

6.2.3 → 6.2.8 Patch PR
Open about 1 year ago
DtsvnProj
Bump org.springframework:spring-web from 6.1.12 to 6.1.21

lfbox7/gcp-vision #2

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago
lfbox7
Bump org.springframework:spring-web from 6.1.12 to 6.1.21

companieshouse/officer-filing-api #230

6.1.12 → 6.1.21 Patch PR
Open about 1 year ago 2 comments
companieshouse
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)