Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 8 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated about 5 hours ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 4 hours ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated about 8 hours ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 8 hours ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
chore(deps)(deps): bump org.springframework:spring-web from 6.0.11 to 6.2.10

Lucasantunesribeiro/Sistema_de_Gestao_de_Pedidos_Distribu-do_com_Event_Sourcing #44

6.0.11 → 6.2.10 Minor PR
Closed 9 months ago 1 comment
Lucasantunesribeiro
Bump org.springframework:spring-web from 5.3.23 to 6.2.10

ghas-labs-2025-09-08-minnajlai/SecurityShepherd #3

5.3.23 → 6.2.10 Major PR
Open 9 months ago
ghas-labs-2025-09-08-minnajlai
Bump org.springframework:spring-web from 5.2.3.RELEASE to 6.2.10

green-code-initiative/creedengo-java #141

5.2.3.RELEASE → 6.2.10 Major PR
Closed 9 months ago
green-code-initiative
Bump the maven-security-patches group across 1 directory with 4 updates

FME-MS/fme-api #10

6.2.6 → 6.2.10 Patch PR
Open 9 months ago 2 comments
FME-MS
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7250

5.3.39 → 6.0.0 Major PR
Open 9 months ago
liquibase
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7244

5.3.39 → 6.0.0 Major PR
Open 9 months ago
liquibase
chore(deps): bump the production-deps group with 7 updates

liquibase/liquibase #7240

5.3.39 → 6.0.0 Major PR
Closed 10 months ago 3 comments
liquibase
Bump the all-minor-patch group with 43 updates

navikt/innsending-api #308

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
navikt
Bump org.springframework:spring-web from 6.2.9 to 6.2.10 in /dashgit-updater

javiertuya/dashgit #215

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 2 comments
javiertuya
Bump org.springframework:spring-web from 6.2.9 to 6.2.10 in /dashgit-updater

javiertuya/dashgit #206

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
javiertuya
Bump the all-minor-patch group with 16 updates

navikt/soknadsmottaker #151

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
navikt
build(deps): bump the low-risk group across 1 directory with 13 updates

Ensono/stacks-java #1516

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
Ensono
Bump org.springframework:spring-web from 5.2.3.RELEASE to 6.2.10

green-code-initiative/creedengo-php #65

5.2.3.RELEASE → 6.2.10 Major PR
Open 10 months ago
green-code-initiative
Bump org.springframework:spring-web from 3.2.1.RELEASE to 6.1.21

orende/jamwiki #2

3.2.1.RELEASE → 6.1.21 Major PR
Open 10 months ago
orende
Bump the spring group across 1 directory with 28 updates

shoucheng3/DSpace__DSpace_CVE-2022-31192_5-10 #17

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
shoucheng3
Bump the spring group with 25 updates

DSpace/DSpace #11230

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
DSpace
Bump the spring group with 28 updates

DSpace/DSpace #11217

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
DSpace
Bump the spring group with 28 updates

DSpace/DSpace #11207

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
DSpace
Bump the maven-dependencies group across 1 directory with 24 updates

Blackdread/rest-filter #396

6.2.3 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
Blackdread
Bump the all-minor-patch group across 1 directory with 18 updates

navikt/arkiv-mock #39

6.2.7 → 6.2.10 Patch PR
Open 10 months ago
navikt
Bump the maven group across 1 directory with 3 updates

descope/ai #18

6.1.0 → 6.1.21 Patch PR
Open 10 months ago
descope
Bump org.springframework:spring-web from 4.2.4.RELEASE to 6.1.21

edinc/java-selenium-framework #23

4.2.4.RELEASE → 6.1.21 Major PR
Open 10 months ago
edinc
build(deps-dev): bump org.springframework:spring-web from 6.2.8 to 6.2.10 in /api-tests

Ensono/stacks-java-cqrs-events #857

6.2.8 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
Ensono
build(deps): bump the low-risk group in /api-tests with 9 updates

Ensono/stacks-java #1513

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
Ensono
Bump the java group with 9 updates

openviglet/turing #2361

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
openviglet
Bump the maven group across 1 directory with 8 updates

offsoc/Mshell #4

3.2.3.RELEASE → 3.2.9.RELEASE Patch PR
Open 10 months ago
offsoc
Bump org.springframework:spring-web from 6.1.5 to 6.1.21 in /java-web-test

jiangxincode/JavaWebTest #201

6.1.5 → 6.1.21 Patch PR
Open 10 months ago 2 comments
jiangxincode
chore(deps): Bump the maven group across 2 directories with 2 updates

CMSgov/qpp-conversion-tool #1556

6.1.16 → 6.1.21 Patch PR
Open 10 months ago
CMSgov
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /mysite4

corock/jx #281

6.1.14 → 6.1.21 Patch PR
Open 10 months ago
corock
build(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /Topics/Spring/SpringMVC-With-Hibernate/CashBackOffer

2KAbhishek/Wipro-PJP #282

6.1.14 → 6.1.21 Patch PR
Merged 10 months ago
2KAbhishek
Bump the maven group across 1 directory with 8 updates

PeezoslugOG/codeql #8

5.3.18 → 6.1.21 Major PR
Open 10 months ago
PeezoslugOG
Bump the all-maven-deps group across 3 directories with 34 updates

craftercms/craftercms #8331

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
craftercms
Bump the all-maven-deps group across 3 directories with 34 updates

craftercms/craftercms #8330

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
craftercms
chore(deps): bump the low-risk group in /api-tests with 8 updates

Ensono/stacks-java-cqrs #769

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
Ensono
build(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.10

getyourguide/openapi-validation-java #241

6.2.8 → 6.2.10 Patch PR
Merged 10 months ago
getyourguide
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

oracle/coherence-spring-sockshop-sample #289

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
oracle
Bump org.springframework:spring-web from 5.3.23 to 6.2.10

ghas-lab-templates/SecurityShepherd #43

5.3.23 → 6.2.10 Major PR
Closed 10 months ago 1 comment
ghas-lab-templates
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 3 updates

secureCodeBox/secureCodeBox #3215

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago 2 comments
secureCodeBox
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.10

JCgH4164838Gh792C124B5/struts-examples #41

6.2.5 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
JCgH4164838Gh792C124B5
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

AdmiralXy/spring-admiralxy-commons #132

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
AdmiralXy
Bump org.springframework:spring-web from 5.3.39 to 6.2.10

adaptris/interlok-cache #712

5.3.39 → 6.2.10 Major PR
Closed 10 months ago 1 comment
adaptris
Bump org.springframework:spring-web from 6.2.2 to 6.2.10

dungeon-hub/dungeon-hub-api #37

6.2.2 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
dungeon-hub
chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #545

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
SAP
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.10

apache/struts-examples #481

6.2.5 → 6.2.10 Patch PR
Open 10 months ago
apache
Bump org.springframework:spring-web from 5.3.23 to 6.2.10

bgalek/url-signer #169

5.3.23 → 6.2.10 Major PR
Open 10 months ago
bgalek
Bump the spring group with 12 updates

shoucheng3/DSpace__DSpace_CVE-2022-31192_5-10 #5

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
shoucheng3
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

UnitVectorY-Labs/jsonschema4springboot #126

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
UnitVectorY-Labs
Bump org.springframework:spring-web from 5.3.39 to 6.2.10

openapi-processor/openapi-processor-spring #361

5.3.39 → 6.2.10 Major PR
Closed 10 months ago 1 comment
openapi-processor
Bump org.springframework:spring-web from 6.2.1 to 6.2.10

nimalank7/Udemy-Spring-CRUD #153

6.2.1 → 6.2.10 Patch PR
Open 10 months ago
nimalank7
Bump org.springframework:spring-web from 5.3.23 to 6.2.10

jadler-mocking/jadler #358

5.3.23 → 6.2.10 Major PR
Open 10 months ago
jadler-mocking
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)