Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated about 2 hours ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 4 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 1 hour ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published over 2 years ago • updated about 1 hour ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 2 hours ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.6

apache/struts-examples #448

6.2.5 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
apache
Bump org.springframework:spring-web from 5.3.23 to 6.0.23 in /SsmDemo

whfever/try-go #7

5.3.23 → 6.0.23 Major PR
Closed about 1 year ago 1 comment
whfever
Bump org.springframework:spring-web from 5.3.29 to 6.2.6

akansha1808/Bastilion #28

5.3.29 → 6.2.6 Major PR
Closed about 1 year ago 1 comment
akansha1808
Gradle: Bump org.springframework:spring-web from 6.2.1 to 6.2.6

Cosmo-Tech/cosmotech-api-common #298

6.2.1 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
Cosmo-Tech
chore(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.6

sonallux/spotify-web-api #465

6.2.5 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
sonallux
build(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.6

MTWGA/thoughtworks-code-review-tools #209

6.2.5 → 6.2.6 Patch PR
Closed about 1 year ago 1 comment
MTWGA
Bump org.springframework:spring-web from 6.1.6 to 6.1.12 in /jag-ccd-application

jianmingtu/copilot-ccd #1

6.1.6 → 6.1.12 Patch PR
Closed about 1 year ago 1 comment
jianmingtu
Bump the gradle-version-updates group across 1 directory with 13 updates

secureCodeBox/secureCodeBox #2970

6.2.3 → 6.2.5 Patch PR
Merged about 1 year ago 4 comments
secureCodeBox
chore(deps): bump the low-risk group across 1 directory with 35 updates

Ensono/stacks-java-cqrs #754

6.2.0 → 6.2.5 Patch PR
Open about 1 year ago 1 comment
Ensono
Bump the spring group across 1 directory with 25 updates

abhijeetb-code/dspace #10

6.2.3 → 6.2.4 Patch PR
Open over 1 year ago 1 comment
abhijeetb-code
Bump org.springframework:spring-web from 6.1.16 to 6.1.18

snejokeee/rest-client-call-exception #24

6.1.16 → 6.1.18 Patch PR
Closed over 1 year ago 1 comment
snejokeee
Bump org.springframework:spring-web from 5.3.25 to 6.0.23 in the maven group across 1 directory

anystub/anystub #97

5.3.25 → 6.0.23 Major PR
Closed over 1 year ago 3 comments
anystub
Bump org.springframework:spring-web from 4.2.0.RELEASE to 6.0.23

VerneZhong/myblog #2

4.2.0.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
VerneZhong
Bump org.springframework:spring-web from 4.3.8.RELEASE to 6.0.23

VerneZhong/paascloud-master #3

4.3.8.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
VerneZhong
Bump org.springframework:spring-web from 5.0.2.RELEASE to 6.0.23 in /MavenEnterpriseApp-web

DevOps-Landmark-Grp02/maven-enterprise-application #4

5.0.2.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
DevOps-Landmark-Grp02
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.0.23

DevOps-Landmark-Grp02/maven-web-application-1 #4

5.1.2.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
DevOps-Landmark-Grp02
Bump org.springframework:spring-web from 6.1.13 to 6.2.1

nimalank7/Udemy-Spring-CRUD #126

6.1.13 → 6.2.1 Minor PR
Merged over 1 year ago
nimalank7
Bump org.springframework:spring-web from 6.0.0 to 6.0.23 in /tutorials/naf/spring-boot-integration-install-events-example

thevpc/nuts #267

6.0.0 → 6.0.23 Patch PR
Closed over 1 year ago
thevpc
Bump org.springframework:spring-web from 5.3.31 to 6.0.23 in /service-provider

Opetushallitus/otuva #11

5.3.31 → 6.0.23 Major PR
Closed over 1 year ago 1 comment
Opetushallitus
Bump org.springframework:spring-web from 5.2.8.RELEASE to 6.0.23

regione-marche/org.seda.payer.web #1

5.2.8.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
regione-marche
Bump org.springframework:spring-web from 5.2.8.RELEASE to 6.0.23

regione-marche/org.seda.payer.manager.web #1

5.2.8.RELEASE → 6.0.23 Major PR
Closed over 1 year ago 1 comment
regione-marche
build(deps): bump org.springframework:spring-web from 5.3.39 to 6.0.23

greenc-FNAL/dcache #4

5.3.39 → 6.0.23 Major PR
Closed over 1 year ago 2 comments
greenc-FNAL
Bump org.springframework:spring-web from 5.3.37 to 6.0.23

Tiqr/tiqr-java-connector #7

5.3.37 → 6.0.23 Major PR
Open over 1 year ago 2 comments
Tiqr
Bump org.springframework:spring-web from 6.1.8 to 6.1.12 in /web

sarvex/game-of-life #189

6.1.8 → 6.1.12 Patch PR
Closed over 1 year ago 1 comment
sarvex
Bump org.springframework:spring-web from 6.0.18 to 6.0.23

jumarko/poptavka #63

6.0.18 → 6.0.23 Patch PR
Closed over 1 year ago 2 comments
jumarko
Bump org.springframework:spring-web from 6.0.19 to 6.0.23 in /moskito-integration/moskito-springboot

anotheria/moskito #291

6.0.19 → 6.0.23 Patch PR
Closed over 1 year ago 2 comments
anotheria
Bump org.springframework:spring-web from 6.0.19 to 6.0.23 in /wystri-examples

ronaldtm/wystriframework #24

6.0.19 → 6.0.23 Patch PR
Closed over 1 year ago 1 comment
ronaldtm
Bump org.springframework:spring-web from 6.0.19 to 6.0.23

nagendra1991/kcm #14

6.0.19 → 6.0.23 Patch PR
Closed over 1 year ago 1 comment
nagendra1991
Bump org.springframework:spring-web from 6.1.6 to 6.1.12

imkulwant/parking-lot-service #5

6.1.6 → 6.1.12 Patch PR
Merged over 1 year ago
imkulwant
Bump org.springframework:spring-web from 6.0.18 to 6.0.23

tattrung15/SpringSecurity #29

6.0.18 → 6.0.23 Patch PR
Closed over 1 year ago 1 comment
tattrung15
Bump the maven group across 15 directories with 8 updates

Hawthorne001/client_java #3

4.3.30.RELEASE → 6.0.19 Major PR
Closed over 1 year ago 4 comments
Hawthorne001
Bump org.springframework:spring-web from 6.0.0 to 6.0.19 in /samples/Maven POM/filenames

Rose2161/linguist #70

6.0.0 → 6.0.19 Patch PR
Closed almost 2 years ago 1 comment
Rose2161
Build: Bump org.springframework:spring-web from 5.3.37 to 5.3.39

Fokko/iceberg #468

5.3.37 → 5.3.39 Patch PR
Open almost 2 years ago 2 comments
Fokko
Bump the maven group across 1 directory with 6 updates

abdulrahman305/codeql #7

5.3.18 → 6.0.19 Major PR
Open almost 2 years ago 7 comments
abdulrahman305
Bump org.springframework:spring-web from 5.1.2.RELEASE to 6.0.19

lxfuckgit/javapai-framework #7

5.1.2.RELEASE → 6.0.19 Major PR
Closed about 2 years ago 1 comment
lxfuckgit
Bump org.springframework:spring-web from 6.1.5 to 6.1.6 in /java-web-test

jiangxincode/JavaWebTest #183

6.1.5 → 6.1.6 Patch PR
Closed about 2 years ago 1 comment
jiangxincode
Bump org.springframework:spring-web from 6.0.0 to 6.0.19 in /sa-token-starter/sa-token-reactor-spring-boot3-starter

dromara/Sa-Token #642

6.0.0 → 6.0.19 Patch PR
Closed about 2 years ago 1 comment
dromara
Bump org.springframework:spring-web from 5.3.7 to 6.0.19 in /sa-token-starter/sa-token-reactor-spring-boot-starter

dromara/Sa-Token #619

5.3.7 → 6.0.19 Major PR
Closed about 2 years ago 1 comment
dromara
Bump org.springframework:spring-web from 5.3.32 to 6.0.18

Sage-Bionetworks/SynapseWebClient #5327

5.3.32 → 6.0.18 Major PR
Closed over 2 years ago 3 comments
Sage-Bionetworks
Bump org.springframework:spring-web from 6.0.0 to 6.0.18 in /budinv-rest-services

joragupra/budinv #18

6.0.0 → 6.0.18 Patch PR
Closed over 2 years ago 2 comments
joragupra
Bump org.springframework:spring-web from 6.0.0 to 6.0.18

Hodvidar-Achille/CodingGames #6

6.0.0 → 6.0.18 Patch PR
Closed over 2 years ago
Hodvidar-Achille
Bump org.springframework:spring-web from 6.1.2 to 6.1.5 in /libraries/bundle-spring

ElmarDott/TP-CM #21

6.1.2 → 6.1.5 Patch PR
Closed over 2 years ago 1 comment
ElmarDott
Bump org.springframework:spring-web from 6.0.0 to 6.0.18

uppalabharath/SaaSDashboard #13

6.0.0 → 6.0.18 Patch PR
Merged over 2 years ago
uppalabharath
Bump org.springframework:spring-web from 6.0.0 to 6.0.18 in /budinv-controller

joragupra/budinv #17

6.0.0 → 6.0.18 Patch PR
Closed over 2 years ago 2 comments
joragupra
Bump the maven group across 3 directories with 6 updates

ngsllc/geoserver #3

5.3.27 → 6.0.17 Major PR
Open over 2 years ago 2 comments
ngsllc
Bump org.springframework:spring-web from 6.0.8 to 6.0.17 in /HelloWorld

geanCarneiro/TreinamentoJavaVixTeam #21

6.0.8 → 6.0.17 Patch PR
Closed over 2 years ago 1 comment
geanCarneiro
Bump org.springframework:spring-web from 5.3.3 to 6.0.17 in /GoMeet

googleinterns/step271-2020 #58

5.3.3 → 6.0.17 Major PR
Closed over 2 years ago 1 comment
googleinterns
Bump org.springframework:spring-web from 6.0.8 to 6.0.17 in /HelloWorld/target/m2e-wtp/web-resources/META-INF/maven/Treinamento/HelloWorld

geanCarneiro/TreinamentoJavaVixTeam #20

6.0.8 → 6.0.17 Patch PR
Closed over 2 years ago 1 comment
geanCarneiro
Bump org.springframework:spring-web from 6.0.0 to 6.0.17

uppalabharath/mflix #14

6.0.0 → 6.0.17 Patch PR
Closed over 2 years ago 1 comment
uppalabharath
Bump org.springframework:spring-web from 5.3.31 to 6.0.0

DwArFeng/familyhelper-ui #13

5.3.31 → 6.0.0 Major PR
Closed over 2 years ago 1 comment
DwArFeng
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)