Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
18 days ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 13 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 1 month ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 1 month ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published over 2 years ago • updated about 16 hours ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated 11 days ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
View all 12 advisories
Recent PRs
RSS Feed
[DT-400-gradle]: Bump the gradle-patch-updates group with 4 updates

DataBiosphere/stairway #208

7.0.1 → 7.0.2 Patch PR
Open 6 months ago 2 comments
DataBiosphere
Bump org.springframework:spring-web from 5.3.32 to 7.0.2

liftwizard/liftwizard #3235

5.3.32 → 7.0.2 Major PR
Closed 6 months ago 1 comment
liftwizard
chore(deps): bump org.springframework:spring-web from 5.3.31 to 7.0.2

mjeanroy/springmvc-mustache #1016

5.3.31 → 7.0.2 Major PR
Closed 6 months ago 1 comment
mjeanroy
fix: bump the other-dependencies group with 20 updates

lsd-consulting/spring-wiremock-stub-generator #122

6.2.6 → 7.0.1 Major PR
Closed 6 months ago 2 comments
lsd-consulting
Bump org.springframework:spring-web from 5.3.32 to 7.0.1

liftwizard/liftwizard #3187

5.3.32 → 7.0.1 Major PR
Open 6 months ago 1 comment
liftwizard
Bump the maven-dependencies group across 1 directory with 19 updates

Blackdread/rest-filter #399

6.2.11 → 7.0.1 Major PR
Closed 6 months ago 1 comment
Blackdread
build(deps): bump the spring group across 1 directory with 13 updates

DSpace/DSpace #11620

6.2.12 → 6.2.13 Patch PR
Closed 6 months ago 1 comment
DSpace
build(deps): bump the spring group with 12 updates

DSpace/DSpace #11583

6.2.12 → 6.2.13 Patch PR
Closed 6 months ago 1 comment
DSpace
fix: bump the other-dependencies group across 1 directory with 20 updates

lsd-consulting/spring-wiremock-stub-generator #120

6.2.6 → 7.0.1 Major PR
Closed 6 months ago 1 comment
lsd-consulting
Bump org.springframework:spring-web from 6.2.12 to 7.0.1

UnitVectorY-Labs/jsonschema4springboot #150

6.2.12 → 7.0.1 Major PR
Closed 6 months ago 2 comments
UnitVectorY-Labs
Bump org.springframework:spring-web from 6.2.12 to 7.0.1

openapi-processor/openapi-processor-spring #394

6.2.12 → 7.0.1 Major PR
Closed 6 months ago 1 comment
openapi-processor
Bump org.springframework:spring-web from 5.3.39 to 6.1.21

Cognia-TestLab/BenchmarkJava #3

5.3.39 → 6.1.21 Major PR
Open 6 months ago 1 comment
Cognia-TestLab
Bump the all-maven-deps group across 3 directories with 109 updates

craftercms/craftercms #8442

6.2.12 → 7.0.0 Major PR
Closed 7 months ago 1 comment
craftercms
Bump org.springframework:spring-web from 6.2.12 to 7.0.0 in /hooks/persistence-defectdojo/hook in the gradle-version-updates group

secureCodeBox/secureCodeBox #3372

6.2.12 → 7.0.0 Major PR
Open 7 months ago 2 comments
secureCodeBox
Bump org.springframework:spring-web from 6.2.12 to 7.0.0

UnitVectorY-Labs/jsonschema4springboot #148

6.2.12 → 7.0.0 Major PR
Closed 7 months ago 1 comment
UnitVectorY-Labs
deps: Bump org.springframework:spring-web from 6.1.21 to 7.0.0

arconia-io/arconia-migrations #134

6.1.21 → 7.0.0 Major PR
Open 7 months ago 1 comment
arconia-io
build(deps): Bump org.springframework:spring-web from 6.2.11 to 7.0.0

OpenFeign/feign #3116

6.2.11 → 7.0.0 Major PR
Open 7 months ago 1 comment
OpenFeign
chore(deps): bump org.springframework:spring-web from 6.1.1 to 6.2.12

edoatley/country-api #11

6.1.1 → 6.2.12 Minor PR
Open 7 months ago 3 comments
edoatley
Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.2.10 → 6.2.12 Patch PR
Closed 7 months ago 1 comment
QuocKhanh2002
chore(deps): bump the low-risk group in /api-tests with 23 updates

Ensono/stacks-java-cqrs #792

6.2.9 → 6.2.12 Patch PR
Closed 7 months ago 1 comment
Ensono
build(deps-dev): bump org.springframework:spring-web from 6.2.8 to 6.2.12 in /api-tests

Ensono/stacks-java-cqrs-events #915

6.2.8 → 6.2.12 Patch PR
Closed 7 months ago 1 comment
Ensono
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates

secureCodeBox/secureCodeBox #3333

6.2.11 → 6.2.12 Patch PR
Open 7 months ago 2 comments
secureCodeBox
Bump org.springframework:spring-web from 6.2.2 to 6.2.12

dungeon-hub/dungeon-hub-api #42

6.2.2 → 6.2.12 Patch PR
Closed 7 months ago 1 comment
dungeon-hub
Bump org.springframework:spring-web from 5.3.39 to 6.2.12

adaptris/interlok-cache #750

5.3.39 → 6.2.12 Major PR
Closed 7 months ago 1 comment
adaptris
Bump org.springframework:spring-web from 6.2.11 to 6.2.12

sullis/microbenchmarks-java #192

6.2.11 → 6.2.12 Patch PR
Merged 8 months ago
sullis
Gradle: Bump org.springframework:spring-web from 6.2.9 to 6.2.12

Cosmo-Tech/cosmotech-api-common #375

6.2.9 → 6.2.12 Patch PR
Open 8 months ago
Cosmo-Tech
Bump org.springframework:spring-web from 6.2.5 to 6.2.12

SparkArmy/SparkArmyBot #228

6.2.5 → 6.2.12 Patch PR
Open 8 months ago
SparkArmy
Bump org.springframework:spring-web from 4.3.0.RELEASE to 6.2.11

abdullahfouad/vulns2 #4

4.3.0.RELEASE → 6.2.11 Major PR
Closed 8 months ago 1 comment
abdullahfouad
chore(deps): bump the low-risk group across 1 directory with 25 updates

Ensono/stacks-java-cqrs #785

6.2.9 → 6.2.11 Patch PR
Closed 8 months ago 1 comment
Ensono
Build(deps-dev): Bump org.springframework:spring-web from 6.2.10 to 6.2.11

apache/struts-examples #503

6.2.10 → 6.2.11 Patch PR
Closed 8 months ago 1 comment
apache
build(deps): Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /form-spring

OpenFeign/feign #3070

6.1.14 → 6.1.21 Patch PR
Open 8 months ago
OpenFeign
build(deps): bump the low-risk group across 1 directory with 25 updates

Ensono/stacks-java #1526

6.2.9 → 6.2.11 Patch PR
Open 8 months ago
Ensono
Bump org.springframework:spring-web from 5.3.36 to 6.1.21

marcomarasca/Synapse-Repository-Services #36

5.3.36 → 6.1.21 Major PR
Open 8 months ago
marcomarasca
Bump org.springframework:spring-web from 6.2.10 to 6.2.11 in /dashgit-updater

javiertuya/dashgit #229

6.2.10 → 6.2.11 Patch PR
Closed 8 months ago 2 comments
javiertuya
Bump the all-minor-patch group with 18 updates

navikt/soknadsmottaker #155

6.2.10 → 6.2.11 Patch PR
Open 8 months ago
navikt
Bump org.springframework:spring-web from 5.2.3.RELEASE to 6.2.11

green-code-initiative/creedengo-php #71

5.2.3.RELEASE → 6.2.11 Major PR
Open 8 months ago
green-code-initiative
Bump the all-minor-patch group with 53 updates

navikt/tilbakemeldingsmottak-api #288

6.2.9 → 6.2.11 Patch PR
Open 8 months ago
navikt
Bump the spring group with 28 updates

DSpace/DSpace #11391

6.2.10 → 6.2.11 Patch PR
Merged 8 months ago
DSpace
Bump the spring group with 25 updates

DSpace/DSpace #11373

6.2.10 → 6.2.11 Patch PR
Merged 8 months ago
DSpace
Bump the spring group with 28 updates

DSpace/DSpace #11365

6.2.10 → 6.2.11 Patch PR
Open 8 months ago
DSpace
Bump the maven-dependencies group across 1 directory with 27 updates

Blackdread/rest-filter #397

6.2.3 → 6.2.11 Patch PR
Open 8 months ago
Blackdread
Bump the all-minor-patch group with 11 updates

navikt/arkiv-mock #43

6.2.10 → 6.2.11 Patch PR
Open 8 months ago
navikt
Bump the all-maven-deps group across 3 directories with 87 updates

QuocKhanh2002/craftercms #2

6.2.10 → 6.2.11 Patch PR
Open 8 months ago
QuocKhanh2002
chore(deps): bump the low-risk group across 1 directory with 22 updates

Ensono/stacks-java-cqrs #777

6.2.9 → 6.2.11 Patch PR
Open 8 months ago 1 comment
Ensono
build(deps): bump the low-risk group across 1 directory with 23 updates

Ensono/stacks-java #1524

6.2.9 → 6.2.11 Patch PR
Open 8 months ago 1 comment
Ensono
Bump the gradle-version-updates group across 1 directory with 9 updates

secureCodeBox/secureCodeBox #3299

6.2.10 → 6.2.11 Patch PR
Open 8 months ago 3 comments
secureCodeBox
Bump the maven-security-patches group across 1 directory with 6 updates

FME-MS/fme-api #12

6.2.6 → 6.2.11 Patch PR
Open 8 months ago
FME-MS
Bump the maven group across 0 directory with 2 updates

feder1402/swagger-core #1

3.2.1.RELEASE → 6.1.20 Major PR
Open 8 months ago
feder1402
Bump the all-maven-deps group across 3 directories with 78 updates

QuocKhanh2002/craftercms #1

6.2.10 → 6.2.11 Patch PR
Open 8 months ago
QuocKhanh2002
chore(deps): bump the low-risk group across 1 directory with 21 updates

Ensono/stacks-java-cqrs #774

6.2.9 → 6.2.11 Patch PR
Open 8 months ago 1 comment
Ensono
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)