Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 2 days ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 2 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 2 days ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated about 22 hours ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 3 days ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
View all 12 advisories
Recent PRs
RSS Feed
Bump org.springframework:spring-web from 5.3.39 to 6.1.14 in /geowebcache

GeoWebCache/geowebcache #1404

5.3.39 → 6.1.14 Major PR
Open about 1 year ago 1 comment
GeoWebCache
Bump org.springframework:spring-web from 5.3.36 to 6.1.14

Sage-Bionetworks/Synapse-Repository-Services #5261

5.3.36 → 6.1.14 Major PR
Open about 1 year ago
Sage-Bionetworks
Bump org.springframework:spring-web from 5.3.39 to 6.1.14

Cantara/microservice-baseline #518

5.3.39 → 6.1.14 Major PR
Closed about 1 year ago 1 comment
Cantara
Bump org.springframework:spring-web from 5.3.39 to 6.1.14

Cantara/HTTPLoadTest-Baseline #751

5.3.39 → 6.1.14 Major PR
Closed about 1 year ago 1 comment
Cantara
Bump org.springframework:spring-web from 5.3.39 to 6.1.14

mybatis/jpetstore-6 #948

5.3.39 → 6.1.14 Major PR
Open about 1 year ago
mybatis
Bump org.springframework:spring-web from 5.3.37 to 6.1.14 in /Integration/org.egovframe.rte.itl.webservice

eGovFramework/egovframe-runtime #177

5.3.37 → 6.1.14 Major PR
Closed about 1 year ago
eGovFramework
Bump org.springframework:spring-web from 5.3.37 to 6.1.14 in /hessian

endorlabs/cve-2016-1000027-poc #6

5.3.37 → 6.1.14 Major PR
Open about 1 year ago
endorlabs
Bump org.springframework:spring-web from 5.3.34 to 6.1.14

sanger/stan-core #527

5.3.34 → 6.1.14 Major PR
Open about 1 year ago
sanger
Bump org.springframework:spring-web from 5.3.33 to 6.1.14 in /samples/client/petstore/java/resttemplate-swagger1

OpenAPITools/openapi-generator #21338

5.3.33 → 6.1.14 Major PR
Closed about 1 year ago
OpenAPITools
Bump org.springframework:spring-web from 5.3.31 to 6.1.14 in /migration-konveyor/kantra/rulesets/spring-framework/tests/data/core-container

KenKilty/mmdemo #6

5.3.31 → 6.1.14 Major PR
Open about 1 year ago
KenKilty
Bump org.springframework:spring-web from 5.3.31 to 6.1.14 in /livraria-spring

Lubrum/livraria #8

5.3.31 → 6.1.14 Major PR
Open about 1 year ago
Lubrum
Bump org.springframework:spring-web from 5.3.30 to 6.1.14

skltp-anpassningstjanster/axel #57

5.3.30 → 6.1.14 Major PR
Open about 1 year ago
skltp-anpassningstjanster
build(deps): bump the maven group across 1 directory with 3 updates

H1d3r/java-memshell-generator #9

5.3.29 → 6.1.14 Major PR
Open about 1 year ago
H1d3r
Bump org.springframework:spring-web from 5.3.3 to 6.1.14 in /GoMeet

googleinterns/step271-2020 #60

5.3.3 → 6.1.14 Major PR
Open about 1 year ago
googleinterns
chore(deps): bump org.springframework:spring-web from 5.3.28 to 6.1.14

uPortal-Project/SimpleContentPortlet #503

5.3.28 → 6.1.14 Major PR
Open about 1 year ago
uPortal-Project
build(deps): bump org.springframework:spring-web from 5.3.26 to 6.1.14

apache/cloudstack #10926

5.3.26 → 6.1.14 Major PR
Closed about 1 year ago 2 comments
apache
Bump org.springframework:spring-web from 5.3.26 to 6.1.14

apigee/apigee-smartdocs-maven-plugin #64

5.3.26 → 6.1.14 Major PR
Open about 1 year ago
apigee
Bump org.springframework:spring-web from 5.3.22 to 6.1.14

youengineering-public/openapi-maven-plugin #12

5.3.22 → 6.1.14 Major PR
Open about 1 year ago
youengineering-public
Bump org.springframework:spring-web from 5.3.18 to 6.1.14 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory

krishnprakash/codeql #351

5.3.18 → 6.1.14 Major PR
Merged about 1 year ago
krishnprakash
Bump org.springframework:spring-web from 5.3.20 to 6.1.14

kostas77/Java-Test-FW #6

5.3.20 → 6.1.14 Major PR
Open about 1 year ago
kostas77
build(deps): bump org.springframework:spring-web from 5.3.19 to 6.1.14

testingisdocumenting/webtau #1633

5.3.19 → 6.1.14 Major PR
Open about 1 year ago
testingisdocumenting
chore: bump org.springframework:spring-web from 5.3.15 to 6.1.14 in /app/server/appsmith-plugins/elasticSearchPlugin

classicvalues/appsmith #180

5.3.15 → 6.1.14 Major PR
Open about 1 year ago
classicvalues
chore(deps): bump org.springframework:spring-web from 5.3.15 to 6.1.14 in /app/server/appsmith-plugins/elasticSearchPlugin

chrismaeda/appsmith #160

5.3.15 → 6.1.14 Major PR
Open about 1 year ago
chrismaeda
Bump org.springframework:spring-web from 5.3.14 to 6.1.14

jraduget/kaleido-repository #92

5.3.14 → 6.1.14 Major PR
Open about 1 year ago
jraduget
Bump org.springframework:spring-web from 5.2.9.RELEASE to 6.1.14 in /default/generated/technology-usage/tests/data/03-web-technology-usage/security

Azure/appcat-konveyor-rulesets #82

5.2.9.RELEASE → 6.1.14 Major PR
Open about 1 year ago
Azure
Bump org.springframework:spring-web from 5.2.7.RELEASE to 6.1.14 in /shardingsphere-elasticjob-ui-backend

hixio-mh/shardingsphere-elasticjob-ui #44

5.2.7.RELEASE → 6.1.14 Major PR
Open about 1 year ago
hixio-mh
Bump org.springframework:spring-web from 5.2.7.RELEASE to 6.1.14 in /sse

OuyangLiuY/java-relate #5

5.2.7.RELEASE → 6.1.14 Major PR
Open about 1 year ago
OuyangLiuY
Bump org.springframework:spring-web from 5.2.7.RELEASE to 6.1.14

yydzxz/ByteDanceOpen #26

5.2.7.RELEASE → 6.1.14 Major PR
Open about 1 year ago
yydzxz
Bump org.springframework:spring-web from 5.2.6.RELEASE to 6.1.14

kbss-cvut/s-forms-manager #8

5.2.6.RELEASE → 6.1.14 Major PR
Open about 1 year ago
kbss-cvut
Bump org.springframework:spring-web from 5.2.5.RELEASE to 6.1.14

HaiVo1994/VoPhiHai_KhaiBaoYTe #19

5.2.5.RELEASE → 6.1.14 Major PR
Open about 1 year ago
HaiVo1994
build(deps): bump org.springframework:spring-web from 5.2.5.RELEASE to 6.1.14

Zoominfo/api-auth-java-client #20

5.2.5.RELEASE → 6.1.14 Major PR
Open about 1 year ago
Zoominfo
build(deps): bump org.springframework:spring-web from 5.2.3.RELEASE to 6.1.14

hixio-mh/cloudstack #226

5.2.3.RELEASE → 6.1.14 Major PR
Open about 1 year ago
hixio-mh
Bump org.springframework:spring-web from 5.2.25.RELEASE to 6.1.14

AVISPL/dal-avdevices-monitors-lg-webos #14

5.2.25.RELEASE → 6.1.14 Major PR
Open about 1 year ago
AVISPL
Bump org.springframework:spring-web from 5.2.24.RELEASE to 6.1.14

OCR4all/LAREX #356

5.2.24.RELEASE → 6.1.14 Major PR
Open about 1 year ago
OCR4all
Bump org.springframework:spring-web from 5.2.22.RELEASE to 6.1.14 in /azkaban-jobtype

WeBankFinTech/Schedulis #133

5.2.22.RELEASE → 6.1.14 Major PR
Open about 1 year ago
WeBankFinTech
Bump org.springframework:spring-web from 5.2.1.RELEASE to 6.1.14 in /Spring/SpringMVC/Assignment01/HelloWorldMVC

skchaudhari903/Wipro-PJP #145

5.2.1.RELEASE → 6.1.14 Major PR
Open about 1 year ago
skchaudhari903
Bump org.springframework:spring-web from 5.1.8.RELEASE to 6.1.14

gabrielsecco22/metabase-java-jwt #10

5.1.8.RELEASE → 6.1.14 Major PR
Open about 1 year ago
gabrielsecco22
Bump org.springframework:spring-web from 5.1.4.RELEASE to 6.1.14 in /test

GoodSamEnterprises/XstoreRelease #6

5.1.4.RELEASE → 6.1.14 Major PR
Open about 1 year ago
GoodSamEnterprises
Bump org.springframework:spring-web from 5.1.6.RELEASE to 6.1.14

wituss/books #3

5.1.6.RELEASE → 6.1.14 Major PR
Open about 1 year ago
wituss
Bump org.springframework:spring-web from 5.1.6.RELEASE to 6.1.14

janemee/WeChatPaydome #4

5.1.6.RELEASE → 6.1.14 Major PR
Open about 1 year ago
janemee
Bump org.springframework:spring-web from 5.1.20.RELEASE to 6.1.14 in /spring-web-5.1.20.RELEASE

apache/servicemix-bundles #287

5.1.20.RELEASE → 6.1.14 Major PR
Open about 1 year ago
apache
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.1.14

DevOps-Landmark-Grp02/maven-web-application #5

5.1.2.RELEASE → 6.1.14 Major PR
Open about 1 year ago
DevOps-Landmark-Grp02
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.1.14

DevOps-Landmark-Grp02/tesla-app #5

5.1.2.RELEASE → 6.1.14 Major PR
Open about 1 year ago
DevOps-Landmark-Grp02
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.1.14

DevOps-Landmark-Grp02/maven-web-application-1 #5

5.1.2.RELEASE → 6.1.14 Major PR
Open about 1 year ago
DevOps-Landmark-Grp02
Bump org.springframework:spring-web from 5.1.14.RELEASE to 6.1.14

JMRI/JMRI #14135

5.1.14.RELEASE → 6.1.14 Major PR
Open about 1 year ago 3 comments
JMRI
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.1.14

MithunTechnologiesDevOps/maven-web-application #668

5.1.2.RELEASE → 6.1.14 Major PR
Closed about 1 year ago
MithunTechnologiesDevOps
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.1.14

zwc00zwc/netty-chat #26

5.1.2.RELEASE → 6.1.14 Major PR
Open about 1 year ago
zwc00zwc
chore: bump org.springframework:spring-web from 5.1.14.RELEASE to 6.1.14 in /app/server/appsmith-interfaces

jswilliamstu/app #125

5.1.14.RELEASE → 6.1.14 Major PR
Closed about 1 year ago 2 comments
jswilliamstu
Bump org.springframework:spring-web from 5.0.5.RELEASE to 6.1.14

maliknabeel/warehouseinventorymanager #13

5.0.5.RELEASE → 6.1.14 Major PR
Open about 1 year ago
maliknabeel
Bump org.springframework:spring-web from 5.0.2.RELEASE to 6.1.14 in /MavenEnterpriseApp-web

DevOps-Landmark-Grp02/maven-enterprise-application #5

5.0.2.RELEASE → 6.1.14 Major PR
Open about 1 year ago
DevOps-Landmark-Grp02
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)