Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 5 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published about 2 years ago • updated about 2 hours ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 1 hour ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated about 5 hours ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 5 hours ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
Bump the maven-security-patches group across 1 directory with 5 updates

FME-MS/fme-api #11

6.2.6 → 6.2.11 Patch PR
Closed 9 months ago 1 comment
FME-MS
build(deps): bump the low-risk group across 1 directory with 22 updates

Ensono/stacks-java #1523

6.2.9 → 6.2.11 Patch PR
Open 9 months ago 1 comment
Ensono
Bump the maven group across 9 directories with 11 updates

EthanThePhoenix38/cvemapping #1

5.1.9.RELEASE → 6.1.21 Major PR
Open 9 months ago
EthanThePhoenix38
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2332

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
inrupt
Bump the all-maven-deps group across 2 directories with 46 updates

craftercms/craftercms #8353

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago 1 comment
craftercms
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

avereon/seenc #18

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
avereon
build(deps): bump org.springframework:spring-web from 6.2.10 to 6.2.11

getyourguide/openapi-validation-java #261

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
getyourguide
build(deps-dev): bump org.springframework:spring-web from 6.2.8 to 6.2.11 in /api-tests

Ensono/stacks-java-cqrs-events #879

6.2.8 → 6.2.11 Patch PR
Open 9 months ago
Ensono
Bump org.springframework:spring-web from 6.2.9 to 6.2.11

oracle/coherence-spring-sockshop-sample #297

6.2.9 → 6.2.11 Patch PR
Open 9 months ago 1 comment
oracle
Bump org.springframework:spring-web from 5.3.23 to 6.2.11

FR4TLIZ/OSO-MiniProjektKP #19

5.3.23 → 6.2.11 Major PR
Open 9 months ago
FR4TLIZ
build(deps): bump the low-risk group across 1 directory with 18 updates

Ensono/stacks-java #1520

6.2.9 → 6.2.11 Patch PR
Open 9 months ago 1 comment
Ensono
Bump org.springframework:spring-web from 5.3.23 to 6.2.11

ghas-lab-templates/SecurityShepherd #47

5.3.23 → 6.2.11 Major PR
Open 9 months ago
ghas-lab-templates
Bump the gradle-version-updates group across 1 directory with 5 updates

secureCodeBox/secureCodeBox #3276

6.2.10 → 6.2.11 Patch PR
Closed 9 months ago 3 comments
secureCodeBox
Bump org.springframework:spring-web from 6.1.4 to 6.2.11

Vipin-Sharma/MSG #91

6.1.4 → 6.2.11 Minor PR
Closed 9 months ago 1 comment
Vipin-Sharma
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.11

JCgH4164838Gh792C124B5/struts-examples #44

6.2.5 → 6.2.11 Patch PR
Closed 9 months ago 1 comment
JCgH4164838Gh792C124B5
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

BeatrixZselezny/Police-simulation-game-project #102

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
BeatrixZselezny
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2327

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
inrupt
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2315

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
inrupt
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.11

mkheck/migrate-struts #9

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
mkheck
Bump org.springframework:spring-web from 6.2.2 to 6.2.11

dungeon-hub/dungeon-hub-api #40

6.2.2 → 6.2.11 Patch PR
Open 9 months ago
dungeon-hub
Bump org.springframework:spring-web from 5.3.39 to 6.2.11

adaptris/interlok-cache #728

5.3.39 → 6.2.11 Major PR
Open 9 months ago
adaptris
[DT-400-gradle]: Bump the gradle-patch-updates group with 6 updates

DataBiosphere/stairway #180

6.2.10 → 6.2.11 Patch PR
Open 9 months ago 1 comment
DataBiosphere
chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #581

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
SAP
Bump org.springframework:spring-web from 5.3.23 to 6.2.11

bgalek/url-signer #172

5.3.23 → 6.2.11 Major PR
Closed 9 months ago 2 comments
bgalek
Bump the java group with 14 updates

openviglet/turing #2380

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
openviglet
Bump the maven group across 16 directories with 8 updates

dhay3/spring #1

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR
Open 9 months ago
dhay3
Bump org.springframework:spring-web from 5.3.39 to 6.2.11

openapi-processor/openapi-processor-spring #371

5.3.39 → 6.2.11 Major PR
Merged 9 months ago
openapi-processor
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7265

5.3.39 → 6.0.0 Major PR
Closed 9 months ago
liquibase
Bump org.springframework:spring-web from 6.2.1 to 6.2.11

nimalank7/Udemy-Spring-CRUD #157

6.2.1 → 6.2.11 Patch PR
Open 9 months ago
nimalank7
Bump org.springframework:spring-web from 5.3.23 to 6.2.11

jadler-mocking/jadler #363

5.3.23 → 6.2.11 Major PR
Open 9 months ago
jadler-mocking
build(deps): Bump org.springframework:spring-web from 6.2.10 to 6.2.11

vmware/build-tools-for-vmware-aria #857

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
vmware
Bump the spring group with 2 updates

jesperancinha/organic-growth-app #81

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
jesperancinha
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

PCGen/pcgen #7401

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
PCGen
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

sullis/microbenchmarks-java #180

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
sullis
Gradle: Bump org.springframework:spring-web from 6.2.10 to 6.2.11

Cosmo-Tech/cosmotech-api-common #362

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
Cosmo-Tech
chore(deps): bump org.springframework:spring-web from 5.3.31 to 6.2.11

mjeanroy/springmvc-mustache #952

5.3.31 → 6.2.11 Major PR
Open 9 months ago
mjeanroy
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.11

sonallux/spotify-web-api #500

6.2.7 → 6.2.11 Patch PR
Merged 9 months ago
sonallux
chore(deps): bump org.springframework:spring-web from 6.2.10 to 6.2.11 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21893

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
dhis2
chore(deps): bump org.springframework:spring-web from 6.2.10 to 6.2.11 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21891

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
dhis2
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

hendisantika/Kotlin-DATA-REST #77

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
hendisantika
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /mysite3

corock/jx #286

6.1.14 → 6.1.21 Patch PR
Merged 9 months ago
corock
build(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.11

MTWGA/thoughtworks-code-review-tools #228

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
MTWGA
Bump org.springframework:spring-web from 6.2.5 to 6.2.11

SparkArmy/SparkArmyBot #227

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
SparkArmy
Bump the spring group with 7 updates

ianrobrien/fakebank #738

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
ianrobrien
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7261

5.3.39 → 6.0.0 Major PR
Closed 9 months ago
liquibase
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7259

5.3.39 → 6.0.0 Major PR
Closed 9 months ago 1 comment
liquibase
Bump org.springframework:spring-web from 6.1.6 to 6.1.21 in /SpringWebStruts

dharm117x/Interview #13

6.1.6 → 6.1.21 Patch PR
Closed 9 months ago
dharm117x
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7256

5.3.39 → 6.0.0 Major PR
Open 9 months ago
liquibase
chore(deps): bump the low-risk group across 1 directory with 13 updates

Ensono/stacks-java-cqrs #773

6.2.9 → 6.2.10 Patch PR
Open 9 months ago 1 comment
Ensono
build(deps): bump the low-risk group across 1 directory with 14 updates

Ensono/stacks-java #1519

6.2.9 → 6.2.10 Patch PR
Closed 9 months ago 1 comment
Ensono
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)