Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 2 days ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 2 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 2 days ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated about 15 hours ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 3 days ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
View all 12 advisories
Recent PRs
RSS Feed
Bump the maven group across 2 directories with 1 update

flux-qa/solid-client-java #1

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
flux-qa
Bump org.springframework:spring-web from 6.2.2 to 6.2.8

NASA-PDS/registry-api #659

6.2.2 → 6.2.8 Patch PR
Open about 1 year ago
NASA-PDS
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

rchristilaw/nhl4j #14

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
rchristilaw
Bump org.springframework:spring-web from 6.2.1 to 6.2.8 in /soot-infoflow-integration

secure-software-engineering/FlowDroid #821

6.2.1 → 6.2.8 Patch PR
Merged about 1 year ago
secure-software-engineering
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

guravvaishnavi02/dubbo #4

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
guravvaishnavi02
Bump org.springframework:spring-web from 6.2.1 to 6.2.8 in /zkspring-core

zkoss/zkspring #48

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
zkoss
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

companieshouse/chs-notification-sender-api #57

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
companieshouse
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

KvotheRMaedre/login-auth #2

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
KvotheRMaedre
Bump org.springframework:spring-web from 6.1.10 to 6.1.21 in /datasafe-rest-impl

adorsys/datasafe #373

6.1.10 → 6.1.21 Patch PR
Open about 1 year ago
adorsys
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

hazelcast/hazelcast-wm #198

6.2.1 → 6.2.8 Patch PR
Closed about 1 year ago 4 comments
hazelcast
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

companieshouse/chs-notification-kafka-consumer #37

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
companieshouse
Bump org.springframework:spring-web from 6.2.1 to 6.2.8 in /akademik

szaroblekitny/akademik #53

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
szaroblekitny
Bump org.springframework:spring-web from 6.2.0 to 6.2.8

javalite/javalite #1403

6.2.0 → 6.2.8 Patch PR
Merged about 1 year ago
javalite
Bump org.springframework:spring-web from 6.2.1 to 6.2.8 in /javamelody-core

javamelody/javamelody #1262

6.2.1 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
javamelody
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

jotesk/demo-one #9

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
jotesk
Bump org.springframework:spring-web from 6.2.0 to 6.2.8

VerneZhong/SpringDemo #2

6.2.0 → 6.2.8 Patch PR
Open about 1 year ago
VerneZhong
Bump org.springframework:spring-web from 6.2.0 to 6.2.8

openl-tablets/x-forwarded-filter #1

6.2.0 → 6.2.8 Patch PR
Open about 1 year ago 1 comment
openl-tablets
build(deps): bump org.springframework:spring-web from 6.2.0 to 6.2.8

Chivenh/simple-helper-utils #7

6.2.0 → 6.2.8 Patch PR
Open about 1 year ago
Chivenh
build(deps): bump org.springframework:spring-web from 6.2.0 to 6.2.8

z2z2qp/msm #189

6.2.0 → 6.2.8 Patch PR
Open about 1 year ago
z2z2qp
Bump org.springframework:spring-web from 6.2.0 to 6.2.8 in /afor-mock

afor-automation/afor #55

6.2.0 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
afor-automation
Bump org.springframework:spring-web from 6.2.1 to 6.2.8

nimalank7/Udemy-Spring-CRUD #142

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago
nimalank7
Bump org.springframework:spring-web from 5.3.23 to 6.2.8

jadler-mocking/jadler #349

5.3.23 → 6.2.8 Major PR
Closed about 1 year ago 1 comment
jadler-mocking
build(deps): Bump org.springframework:spring-web from 6.2.7 to 6.2.8

vmware/build-tools-for-vmware-aria #752

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago 1 comment
vmware
Bump the all-maven-deps group with 15 updates

craftercms/craftercms #8205

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
craftercms
Bump the spring group with 2 updates

jesperancinha/organic-growth-app #60

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
jesperancinha
Bump the all-maven-deps group with 15 updates

craftercms/craftercms #8204

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
craftercms
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

PCGen/pcgen #7356

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago 1 comment
PCGen
Gradle: Bump org.springframework:spring-web from 6.2.1 to 6.2.8

Cosmo-Tech/cosmotech-api-common #318

6.2.1 → 6.2.8 Patch PR
Open about 1 year ago 1 comment
Cosmo-Tech
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

sullis/microbenchmarks-java #143

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
sullis
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

FraunhoferIOSB/FAAAST-Registry #292

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
FraunhoferIOSB
chore(deps): bump org.springframework:spring-web from 5.3.31 to 6.2.8

mjeanroy/springmvc-mustache #903

5.3.31 → 6.2.8 Major PR
Open about 1 year ago
mjeanroy
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21210

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
dhis2
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21209

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
dhis2
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

hendisantika/Kotlin-DATA-REST #58

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
hendisantika
Bump the spring group across 1 directory with 4 updates

jesperancinha/virtual-thread-coroutine-cooperation #72

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
jesperancinha
Bump org.springframework:spring-web from 5.3.23 to 6.1.14

jadler-mocking/jadler #346

5.3.23 → 6.1.14 Major PR
Open about 1 year ago
jadler-mocking
build(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.8

MTWGA/thoughtworks-code-review-tools #215

6.2.5 → 6.2.8 Patch PR
Open about 1 year ago
MTWGA
Bump the spring group with 7 updates

ianrobrien/fakebank #684

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
ianrobrien
fix: bump the other-dependencies group across 1 directory with 14 updates

lsd-consulting/spring-wiremock-stub-generator #114

6.2.6 → 6.2.8 Patch PR
Closed about 1 year ago 3 comments
lsd-consulting
build(deps): bump the maven group across 1 directory with 2 updates

Hack23/cia #7448

5.3.39 → 6.0.23 Major PR
Open about 1 year ago 3 comments
Hack23
Bump the all-minor-patch group across 1 directory with 13 updates

navikt/arkiv-mock #33

6.1.3 → 6.2.7 Minor PR
Merged about 1 year ago
navikt
Bump org.springframework:spring-web from 5.3.39 to 6.2.7

openapi-processor/openapi-processor-spring #344

5.3.39 → 6.2.7 Major PR
Closed about 1 year ago 1 comment
openapi-processor
Bump the maven group across 17 directories with 10 updates

alokkulkarni/openapi-generator #3

4.3.20.RELEASE → 6.1.14 Major PR
Open about 1 year ago
alokkulkarni
Bump org.springframework:spring-web from 5.3.23 to 6.1.14

ghas-lab-templates/SecurityShepherd #25

5.3.23 → 6.1.14 Major PR
Closed about 1 year ago 1 comment
ghas-lab-templates
Bump org.springframework:spring-web from 6.1.12 to 6.1.14

jmkeyes/opensaml-message-converter #2

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
jmkeyes
Bump org.springframework:spring-web from 6.0.0 to 6.1.14

SeonDH/demo.batch #2

6.0.0 → 6.1.14 Minor PR
Open about 1 year ago
SeonDH
Bump org.springframework:spring-web from 5.3.23 to 6.2.7

jadler-mocking/jadler #338

5.3.23 → 6.2.7 Major PR
Open about 1 year ago
jadler-mocking
chore(deps): bump the low-risk group across 1 directory with 36 updates

Ensono/stacks-java-cqrs #760

6.2.0 → 6.2.7 Patch PR
Closed about 1 year ago 1 comment
Ensono
Bump org.springframework:spring-web from 6.0.23 to 6.2.7 in /api-tests

Ensono/stacks-java-cqrs-events #798

6.0.23 → 6.2.7 Minor PR
Closed about 1 year ago 1 comment
Ensono
build(deps): bump the low-risk group across 1 directory with 36 updates

Ensono/stacks-java #1498

6.2.0 → 6.2.7 Patch PR
Open about 1 year ago
Ensono
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)