Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 2 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 3 days ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated 1 day ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 4 days ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 2 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
View all 12 advisories
Recent PRs
RSS Feed
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

oracle/coherence-spring-sockshop-sample #251

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago 1 comment
oracle
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

inrupt/solid-client-java #2098

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago 2 comments
inrupt
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

inrupt/solid-client-java #2096

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
inrupt
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

inrupt/solid-client-java #2093

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
inrupt
Bump the java group across 1 directory with 10 updates

openviglet/turing #2306

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
openviglet
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

AdmiralXy/spring-admiralxy-commons #100

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
AdmiralXy
Bump org.springframework:spring-web from 6.1.14 to 6.2.7

redisson/redisson #6590

6.1.14 → 6.2.7 Minor PR
Closed about 1 year ago
redisson
Bump org.springframework:spring-web from 3.2.10.RELEASE to 6.0.23 in /modules/flowable5-mule-test

henry0hai/flowable-k8s #40

3.2.10.RELEASE → 6.0.23 Major PR
Open about 1 year ago
henry0hai
Bump the spring group with 12 updates

DSpace/DSpace #10757

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
DSpace
Bump org.springframework:spring-web from 5.3.39 to 6.2.7

adaptris/interlok-cache #658

5.3.39 → 6.2.7 Major PR
Open about 1 year ago 1 comment
adaptris
Bump org.springframework:spring-web from 6.2.2 to 6.2.7

dungeon-hub/dungeon-hub-api #31

6.2.2 → 6.2.7 Patch PR
Open about 1 year ago
dungeon-hub
Bump org.springframework:spring-web from 5.3.39 to 6.2.7

adaptris/interlok-cache #657

5.3.39 → 6.2.7 Major PR
Open about 1 year ago 1 comment
adaptris
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.7

apache/struts-examples #458

6.2.5 → 6.2.7 Patch PR
Closed about 1 year ago 1 comment
apache
Bump org.springframework:spring-web from 5.3.23 to 6.2.7

bgalek/url-signer #146

5.3.23 → 6.2.7 Major PR
Open about 1 year ago 2 comments
bgalek
Bump org.springframework:spring-web from 6.2.1 to 6.2.7 in /backend

CDCgov/prime-simplereport #8824

6.2.1 → 6.2.7 Patch PR
Open about 1 year ago 4 comments
CDCgov
Bump org.springframework:spring-web from 5.0.7.RELEASE to 6.0.23

incredincomp/SecurityShepherd #4

5.0.7.RELEASE → 6.0.23 Major PR
Closed about 1 year ago 1 comment
incredincomp
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

UnitVectorY-Labs/jsonschema4springboot #105

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago 1 comment
UnitVectorY-Labs
build(deps): Bump org.springframework:spring-web from 6.2.6 to 6.2.7

vmware/build-tools-for-vmware-aria #724

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago
vmware
Bump the spring group with 2 updates

jesperancinha/organic-growth-app #55

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
jesperancinha
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

PCGen/pcgen #7330

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago 1 comment
PCGen
Bump org.springframework:spring-web from 5.3.29 to 6.2.7

akansha1808/Bastilion #36

5.3.29 → 6.2.7 Major PR
Open about 1 year ago
akansha1808
Gradle: Bump org.springframework:spring-web from 6.2.1 to 6.2.7

Cosmo-Tech/cosmotech-api-common #312

6.2.1 → 6.2.7 Patch PR
Open about 1 year ago
Cosmo-Tech
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

sullis/microbenchmarks-java #135

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
sullis
chore(deps): bump org.springframework:spring-web from 5.3.31 to 6.2.7

mjeanroy/springmvc-mustache #890

5.3.31 → 6.2.7 Major PR
Closed about 1 year ago
mjeanroy
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

FraunhoferIOSB/FAAAST-Registry #279

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago
FraunhoferIOSB
chore(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.7

sonallux/spotify-web-api #469

6.2.5 → 6.2.7 Patch PR
Open about 1 year ago 1 comment
sonallux
chore(deps): bump org.springframework:spring-web from 6.2.6 to 6.2.7 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #20980

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
dhis2
chore(deps): bump org.springframework:spring-web from 6.2.6 to 6.2.7 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #20976

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago
dhis2
Bump org.springframework:spring-web from 6.2.6 to 6.2.7

hendisantika/Kotlin-DATA-REST #53

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago 2 comments
hendisantika
Bump the spring group with 2 updates

jesperancinha/virtual-thread-coroutine-cooperation #61

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
jesperancinha
build(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.7

MTWGA/thoughtworks-code-review-tools #214

6.2.5 → 6.2.7 Patch PR
Closed about 1 year ago 1 comment
MTWGA
Bump the maven-security-patches group with 2 updates

FME-MS/fme-api #7

6.2.6 → 6.2.7 Patch PR
Closed about 1 year ago 1 comment
FME-MS
Bump the spring group with 7 updates

ianrobrien/fakebank #667

6.2.6 → 6.2.7 Patch PR
Merged about 1 year ago
ianrobrien
fix: bump the other-dependencies group across 1 directory with 9 updates

lsd-consulting/spring-wiremock-stub-generator #108

6.2.6 → 6.2.7 Patch PR
Open about 1 year ago
lsd-consulting
Bump the maven-security-patches group with 5 updates

FME-MS/fme-api #5

6.2.2 → 6.2.6 Patch PR
Open about 1 year ago
FME-MS
Bump org.springframework:spring-web from 6.0.18 to 6.0.23

uppalabharath/SaaSDashboard #14

6.0.18 → 6.0.23 Patch PR
Merged about 1 year ago
uppalabharath
Bump org.springframework:spring-web from 6.0.0 to 6.0.23

uppalabharath/mflix #15

6.0.0 → 6.0.23 Patch PR
Open about 1 year ago
uppalabharath
Bump org.springframework:spring-web from 6.1.3 to 6.1.12 in /billion-data-subtable/mds-subtable-common/mds-subtable-base

snorlaxy213/develop-best-demo #13

6.1.3 → 6.1.12 Patch PR
Closed about 1 year ago 1 comment
snorlaxy213
Bump the maven group across 1 directory with 8 updates

offsoc/Mshell #2

3.2.3.RELEASE → 3.2.9.RELEASE Patch PR
Closed about 1 year ago 1 comment
offsoc
Bump the all-minor-patch group across 1 directory with 24 updates

navikt/soknadsarkiverer #217

6.2.5 → 6.2.6 Patch PR
Merged about 1 year ago
navikt
Bump the all-minor-patch group with 13 updates

navikt/soknadsmottaker #141

6.2.5 → 6.2.6 Patch PR
Merged about 1 year ago
navikt
Bump the all-minor-patch group with 22 updates

navikt/soknadsarkiverer #215

6.2.5 → 6.2.6 Patch PR
Open about 1 year ago 2 comments
navikt
Bump the all-minor-patch group with 41 updates

navikt/tilbakemeldingsmottak-api #276

6.2.5 → 6.2.6 Patch PR
Merged about 1 year ago
navikt
Bump the maven-dependencies group across 1 directory with 21 updates

Blackdread/rest-filter #392

6.2.3 → 6.2.6 Patch PR
Open about 1 year ago 1 comment
Blackdread
Bump org.springframework:spring-web from 6.2.1 to 6.2.6 in /backend

CDCgov/prime-simplereport #8739

6.2.1 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
CDCgov
Bump the spring group across 1 directory with 4 updates

jesperancinha/organic-growth-app #51

6.2.5 → 6.2.6 Patch PR
Merged about 1 year ago
jesperancinha
Bump org.springframework:spring-web from 6.1.14 to 6.2.6

redisson/redisson #6548

6.1.14 → 6.2.6 Minor PR
Closed about 1 year ago 1 comment
redisson
Bump org.springframework:spring-web from 6.2.2 to 6.2.6

dungeon-hub/dungeon-hub-api #26

6.2.2 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
dungeon-hub
Bump org.springframework:spring-web from 5.3.39 to 6.2.6

adaptris/interlok-cache #649

5.3.39 → 6.2.6 Major PR
Closed about 1 year ago 1 comment
adaptris
Bump org.springframework:spring-web from 5.3.39 to 6.2.6

adaptris/interlok-cache #646

5.3.39 → 6.2.6 Major PR
Closed about 1 year ago 1 comment
adaptris
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)