Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 2 days ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 2 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 2 days ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated about 16 hours ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 3 days ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
View all 12 advisories
Recent PRs
RSS Feed
fix: bump the other-dependencies group across 1 directory with 13 updates

lsd-consulting/spring-wiremock-stub-generator #113

6.2.6 → 6.2.7 Patch PR
Closed about 1 year ago 3 comments
lsd-consulting
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates

secureCodeBox/secureCodeBox #3060

6.2.5 → 6.2.7 Patch PR
Open about 1 year ago 3 comments
secureCodeBox
Bump org.springframework:spring-web from 3.2.4.RELEASE to 6.1.14 in /Nettiirkki

lauri-kaariainen/irc-Spring-backend #2

3.2.4.RELEASE → 6.1.14 Major PR
Open about 1 year ago
lauri-kaariainen
Bump the all-minor-patch group with 19 updates

navikt/soknadsmottaker #143

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
navikt
[PF-2987]: Bump the minor-patch-dependencies group with 10 updates

DataBiosphere/stairway #168

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago 2 comments
DataBiosphere
Bump the all-minor-patch group with 21 updates

navikt/soknadsarkiverer #219

6.2.6 → 6.2.7 Patch PR
Closed about 1 year ago 2 comments
navikt
Bump the all-minor-patch group with 48 updates

navikt/tilbakemeldingsmottak-api #278

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
navikt
Bump the maven-dev-deps group with 3 updates

chadlwilson/jruby-rack #4

4.3.30.RELEASE → 6.2.7 Major PR
Open about 1 year ago
chadlwilson
Bump org.springframework:spring-web from 4.3.30.RELEASE to 6.1.14

jruby/jruby-rack #279

4.3.30.RELEASE → 6.1.14 Major PR
Open about 1 year ago 2 comments
jruby
Bump the maven-dev-deps group with 3 updates

jruby/jruby-rack #276

4.3.30.RELEASE → 6.2.7 Major PR
Open about 1 year ago 1 comment
jruby
Bump the maven group across 1 directory with 6 updates

nathantypanski/NTL-Lunar-Mapping-and-Modeling-Portal #1

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR
Open about 1 year ago
nathantypanski
Bump org.springframework:spring-web from 6.0.18 to 6.1.14 in /target/m2e-wtp/web-resources/META-INF/maven/Hello/Demo

tattrung15/SpringSecurity #38

6.0.18 → 6.1.14 Minor PR
Merged about 1 year ago
tattrung15
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/StudentOut

2KAbhishek/Wipro-PJP #265

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/TopMovies

2KAbhishek/Wipro-PJP #264

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/TopMoviesEach

2KAbhishek/Wipro-PJP #263

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/HelloWorldMVC

2KAbhishek/Wipro-PJP #262

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/CashBackOffer

2KAbhishek/Wipro-PJP #261

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/StudentIn

2KAbhishek/Wipro-PJP #259

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
Bump org.springframework:spring-web from 6.1.13 to 6.1.14 in /form-spring

OpenFeign/feign #2904

6.1.13 → 6.1.14 Patch PR
Open about 1 year ago
OpenFeign
Bump org.springframework:spring-web from 6.1.8 to 6.1.14 in /dapr-spring

dapr/java-sdk #1393

6.1.8 → 6.1.14 Patch PR
Open about 1 year ago 1 comment
dapr
build(deps): bump the maven group across 1 directory with 2 updates

Hack23/cia #7416

5.3.39 → 6.0.23 Major PR
Closed about 1 year ago 3 comments
Hack23
Bump org.springframework:spring-web from 5.3.28 to 6.1.14

secureCodeBox/defectdojo-client-java #133

5.3.28 → 6.1.14 Major PR
Open about 1 year ago
secureCodeBox
Bump org.springframework:spring-web from 5.3.33 to 6.1.14

esentri/domainlifecycles #35

5.3.33 → 6.1.14 Major PR
Closed about 1 year ago 2 comments
esentri
Bump org.springframework:spring-web from 6.2.1 to 6.2.7

nimalank7/Udemy-Spring-CRUD #131

6.2.1 → 6.2.7 Patch PR
Closed about 1 year ago 1 comment
nimalank7
Build(deps): Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /moesif-springrequest in the maven group across 1 directory

lygg6699/moesif-servlet #1

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
lygg6699
build(deps): bump the maven group across 1 directory with 2 updates

Hack23/cia #7412

5.3.39 → 6.0.23 Major PR
Open about 1 year ago 2 comments
Hack23
Bump org.springframework:spring-web from 6.1.8 to 6.1.14 in /web

sarvex/game-of-life #194

6.1.8 → 6.1.14 Patch PR
Closed about 1 year ago 2 comments
sarvex
Bump org.springframework:spring-web from 6.1.6 to 6.1.14 in /jag-ccd-application

jianmingtu/copilot-ccd #5

6.1.6 → 6.1.14 Patch PR
Open about 1 year ago
jianmingtu
Bump org.springframework:spring-web from 6.1.5 to 6.1.14

mcherm/TeachChildrenToSave #28

6.1.5 → 6.1.14 Patch PR
Closed about 1 year ago 1 comment
mcherm
Bump org.springframework:spring-web from 6.1.3 to 6.1.14 in /billion-data-subtable/mds-subtable-common/mds-subtable-base

snorlaxy213/develop-best-demo #15

6.1.3 → 6.1.14 Patch PR
Closed about 1 year ago 1 comment
snorlaxy213
Bump org.springframework:spring-web from 6.1.13 to 6.1.14

binarywang/weixin-java-mp-demo-springmvc #42

6.1.13 → 6.1.14 Patch PR
Merged about 1 year ago
binarywang
chore(deps): bump org.springframework:spring-web from 6.1.13 to 6.1.14

InseeFr/Pearl-Jam-Batch #88

6.1.13 → 6.1.14 Patch PR
Open about 1 year ago
InseeFr
Bump org.springframework:spring-web from 6.1.13 to 6.1.14 in /soot-infoflow

secure-software-engineering/FlowDroid #820

6.1.13 → 6.1.14 Patch PR
Open about 1 year ago
secure-software-engineering
⬆️ Bump org.springframework:spring-web from 6.1.13 to 6.1.14

binarywang/weixin-java-mp-multi-demo #25

6.1.13 → 6.1.14 Patch PR
Merged about 1 year ago
binarywang
Bump org.springframework:spring-web from 6.1.13 to 6.1.14 in /spring

OpenFeign/feign #2900

6.1.13 → 6.1.14 Patch PR
Open about 1 year ago
OpenFeign
Build(deps): Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /moesif-springrequest

Moesif/moesif-servlet #141

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
Moesif
Bump org.springframework:spring-web from 6.1.13 to 6.1.14 in /Services

rickardhm/sudokoresolver #18

6.1.13 → 6.1.14 Patch PR
Merged about 1 year ago
rickardhm
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /client

SAP/java-integration-for-sap-mobile-services #599

6.1.12 → 6.1.14 Patch PR
Closed about 1 year ago 1 comment
SAP
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /zxingorg in the maven group across 1 directory

stagietechs/zxing #1

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago 1 comment
stagietechs
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /zxingorg in the maven group across 1 directory

draghtnight/zxing #1

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
draghtnight
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /zxingorg

guravvaishnavi02/zxing #1

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
guravvaishnavi02
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /zxingorg

jhanley634/zxing #8

6.1.12 → 6.1.14 Patch PR
Closed about 1 year ago 2 comments
jhanley634
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /home/rssfiz.show

rodakw/rssfiz #14

6.1.12 → 6.1.14 Patch PR
Closed about 1 year ago 1 comment
rodakw
Bump org.springframework:spring-web from 6.1.12 to 6.1.14

companieshouse/psc-filing-api #117

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago 3 comments
companieshouse
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /hyperjaxb/ejb/samples/customerservice-cxf

highsource/jaxb-tools #620

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
highsource
Bump org.springframework:spring-web from 6.1.12 to 6.1.14

DominiqueComte/cacheproviders #211

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago
DominiqueComte
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /zxingorg

zxing/zxing #1944

6.1.12 → 6.1.14 Patch PR
Closed about 1 year ago 1 comment
zxing
Bump org.springframework:spring-web from 6.1.12 to 6.1.14

inpercima/rest-api #8

6.1.12 → 6.1.14 Patch PR
Merged about 1 year ago
inpercima
Bump org.springframework:spring-web from 6.1.12 to 6.1.14

companieshouse/officer-filing-api #229

6.1.12 → 6.1.14 Patch PR
Open about 1 year ago 2 comments
companieshouse
Bump org.springframework:spring-web from 6.1.12 to 6.1.14 in /sonews-modules/storage-hibernate-ogm-couchdb

chrlns/sonews #75

6.1.12 → 6.1.14 Patch PR
Merged about 1 year ago
chrlns
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)