Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 12 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated about 9 hours ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 8 hours ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated about 12 hours ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 12 hours ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
build(deps): Bump org.springframework:spring-web from 6.2.9 to 6.2.10

vmware/build-tools-for-vmware-aria #822

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
vmware
Bump org.springframework:spring-web from 6.2.8 to 6.2.10

inrupt/solid-client-java #2260

6.2.8 → 6.2.10 Patch PR
Merged 10 months ago
inrupt
Bump the all group across 1 directory with 86 updates

OSGP/open-smart-grid-platform #1630

6.2.9 → 6.2.10 Patch PR
Closed 10 months ago 2 comments
OSGP
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

PCGen/pcgen #7393

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
PCGen
Bump the spring group with 2 updates

jesperancinha/organic-growth-app #73

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
jesperancinha
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

sullis/microbenchmarks-java #165

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
sullis
chore(deps): bump org.springframework:spring-web from 5.3.31 to 6.2.10

mjeanroy/springmvc-mustache #938

5.3.31 → 6.2.10 Major PR
Closed 10 months ago
mjeanroy
[DT-400-gradle]: Bump the gradle-patch-updates group with 3 updates

DataBiosphere/stairway #178

6.2.9 → 6.2.10 Patch PR
Open 10 months ago 1 comment
DataBiosphere
chore(deps): bump org.springframework:spring-web from 6.2.9 to 6.2.10 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21634

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
dhis2
Bump org.springframework:spring-web from 6.2.9 to 6.2.10

hendisantika/Kotlin-DATA-REST #71

6.2.9 → 6.2.10 Patch PR
Merged 10 months ago
hendisantika
Bump org.springframework:spring-web from 6.0.23 to 6.2.10

avereon/seenc #12

6.0.23 → 6.2.10 Minor PR
Merged 10 months ago
avereon
Bump org.springframework:spring-web from 6.1.12 to 6.2.10

AuDigitalHealth/lingo #16

6.1.12 → 6.2.10 Minor PR
Closed 10 months ago 1 comment
AuDigitalHealth
Bump org.springframework:spring-web from 4.3.20.RELEASE to 6.1.21

harp077/jsf-hash #2

4.3.20.RELEASE → 6.1.21 Major PR
Merged 10 months ago
harp077
Bump org.springframework:spring-web from 6.2.5 to 6.2.10

SparkArmy/SparkArmyBot #225

6.2.5 → 6.2.10 Patch PR
Closed 10 months ago 1 comment
SparkArmy
Bump the spring group with 7 updates

ianrobrien/fakebank #722

6.2.9 → 6.2.10 Patch PR
Open 10 months ago
ianrobrien
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

harp077/jsf-hash-min #6

6.1.14 → 6.1.21 Patch PR
Merged 10 months ago
harp077
build(deps): bump the maven group across 1 directory with 3 updates

offsoc/java-cas-client #3

6.2.3 → 6.2.7 Patch PR
Open 10 months ago
offsoc
chore(deps): Bump the maven group across 2 directories with 2 updates

CMSgov/qpp-conversion-tool #1552

6.1.21 → 6.2.9 Minor PR
Closed 10 months ago
CMSgov
Bump org.springframework:spring-web from 6.2.3 to 6.2.8

amazon-mq/upstreaming-activemq #29

6.2.3 → 6.2.8 Patch PR
Open 10 months ago
amazon-mq
chore(deps): bump the low-risk group across 1 directory with 36 updates

Ensono/stacks-java-cqrs #766

6.2.8 → 6.2.9 Patch PR
Merged 10 months ago 3 comments
Ensono
Bump org.springframework:spring-web from 6.0.0 to 6.1.21 in /TEST-ELASTIC

namerajendrasingh/TEST-ELSTIC #8

6.0.0 → 6.1.21 Minor PR
Merged 10 months ago
namerajendrasingh
Bump the all-maven-deps group across 3 directories with 62 updates

craftercms/craftercms #8310

6.2.8 → 6.2.9 Patch PR
Merged 10 months ago
craftercms
Bump org.springframework:spring-web from 5.3.30 to 6.1.21

Yassine-aoun/BankApp #1

5.3.30 → 6.1.21 Major PR
Merged 10 months ago
Yassine-aoun
build(deps): bump the maven group across 1 directory with 2 updates

offsoc/cloudstack #8

6.1.20 → 6.1.21 Patch PR
Merged 10 months ago
offsoc
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 6 updates

secureCodeBox/secureCodeBox #3170

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
secureCodeBox
Bump org.springframework:spring-web from 5.3.23 to 6.2.9

ghas-lab-templates/SecurityShepherd #39

5.3.23 → 6.2.9 Major PR
Closed 11 months ago 1 comment
ghas-lab-templates
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /samples/Maven POM/filenames

Rose2161/linguist #101

6.1.14 → 6.1.21 Patch PR
Open 11 months ago
Rose2161
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.9

JCgH4164838Gh792C124B5/struts-examples #36

6.2.5 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
JCgH4164838Gh792C124B5
Bump the all-minor-patch group across 1 directory with 65 updates

navikt/innsending-api #300

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
navikt
Bump org.springframework:spring-web from 6.2.8 to 6.2.9 in /dashgit-updater

javiertuya/dashgit #199

6.2.8 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
javiertuya
[PF-2987]: Bump the minor-patch-dependencies group with 13 updates

DataBiosphere/stairway #170

6.2.8 → 6.2.9 Patch PR
Open 11 months ago 2 comments
DataBiosphere
Bump the all-minor-patch group across 1 directory with 48 updates

navikt/tilbakemeldingsmottak-api #283

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
navikt
Bump org.springframework:spring-web from 5.3.18 to 6.1.21

WuShuaiNan/wusn-ui #1

5.3.18 → 6.1.21 Major PR
Closed 11 months ago
WuShuaiNan
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

inrupt/solid-client-java #2244

6.2.8 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
inrupt
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

inrupt/solid-client-java #2237

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
inrupt
Bump the maven-dependencies group across 1 directory with 22 updates

Blackdread/rest-filter #395

6.2.3 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
Blackdread
Bump the all-minor-patch group across 1 directory with 16 updates

navikt/arkiv-mock #37

6.2.7 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
navikt
build(deps): Bump org.springframework:spring-web from 6.2.8 to 6.2.9

vmware/build-tools-for-vmware-aria #805

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
vmware
Bump org.springframework:spring-web from 6.0.0 to 6.1.21

hbzhou/java-jdk-sample #8

6.0.0 → 6.1.21 Minor PR
Open 11 months ago
hbzhou
Bump the maven group with 4 updates

MissionOpen/BenchmarkJava #3

5.3.39 → 6.1.20 Major PR
Open 11 months ago 1 comment
MissionOpen
chore(deps): bump the low-risk group across 1 directory with 37 updates

Ensono/stacks-java-cqrs #765

6.2.8 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
Ensono
build(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.9

getyourguide/openapi-validation-java #232

6.2.8 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
getyourguide
Bump org.springframework:spring-web from 5.3.23 to 6.2.9

FR4TLIZ/OSO-MiniProjektKP #16

5.3.23 → 6.2.9 Major PR
Closed 11 months ago 1 comment
FR4TLIZ
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

castle/castle-java #155

6.1.14 → 6.1.21 Patch PR
Open 11 months ago
castle
Bump the all-maven-deps group across 2 directories with 62 updates

craftercms/craftercms #8291

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
craftercms
Bump the spring group across 1 directory with 25 updates

DSpace/DSpace #11095

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
DSpace
Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11093

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
DSpace
Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11086

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
DSpace
chore: [DevOps] bump the production-minor-patch group with 14 updates

SAP/ai-sdk-java #516

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
SAP
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in the maven group across 1 directory

tim2346/John-joe #6

6.1.20 → 6.1.21 Patch PR
Merged 11 months ago
tim2346
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)