Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 21 hours ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated about 18 hours ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 17 hours ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated about 21 hours ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 21 hours ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
Bump the maven group across 1 directory with 5 updates

tim2346/John-joe #5

5.2.22.RELEASE → 6.1.20 Major PR
Merged 11 months ago
tim2346
fix: bump the other-dependencies group across 1 directory with 19 updates

lsd-consulting/spring-wiremock-stub-generator #118

6.2.6 → 6.2.9 Patch PR
Closed 11 months ago 5 comments
lsd-consulting
Bump the all-maven-deps group across 2 directories with 61 updates

craftercms/craftercms #8290

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
craftercms
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

Ericsson/ecchronos #1026

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
Ericsson
Bump org.springframework:spring-web from 6.2.8 to 6.2.9 in /api-tests

Ensono/stacks-java-cqrs-events #836

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
Ensono
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

AdmiralXy/spring-admiralxy-commons #123

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
AdmiralXy
chore(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.9

okta/okta-auth-java #758

6.2.8 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
okta
Bump the spring group with 12 updates

DSpace/DSpace #11054

6.2.8 → 6.2.9 Patch PR
Open 11 months ago 1 comment
DSpace
Bump the spring group with 12 updates

DSpace/DSpace #11052

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
DSpace
Bump org.springframework:spring-web from 6.2.2 to 6.2.9

dungeon-hub/dungeon-hub-api #35

6.2.2 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
dungeon-hub
Bump org.springframework:spring-web from 5.3.39 to 6.2.9

adaptris/interlok-cache #699

5.3.39 → 6.2.9 Major PR
Open 11 months ago
adaptris
Bump org.springframework:spring-web from 5.3.39 to 6.2.9

adaptris/interlok-cache #698

5.3.39 → 6.2.9 Major PR
Closed 11 months ago 2 comments
adaptris
Bump org.springframework:spring-web from 5.3.23 to 6.2.9

bgalek/url-signer #162

5.3.23 → 6.2.9 Major PR
Open 11 months ago
bgalek
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.9

apache/struts-examples #475

6.2.5 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
apache
Bump org.springframework:spring-web from 6.2.7 to 6.2.9 in /backend

CDCgov/prime-simplereport #9024

6.2.7 → 6.2.9 Patch PR
Open 11 months ago
CDCgov
Bump the maven group across 1 directory with 3 updates

louismanhnguyen1998/linguist #3

6.1.14 → 6.1.20 Patch PR
Open 11 months ago
louismanhnguyen1998
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

UnitVectorY-Labs/jsonschema4springboot #121

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
UnitVectorY-Labs
Bump org.springframework:spring-web from 5.3.39 to 6.2.9

openapi-processor/openapi-processor-spring #354

5.3.39 → 6.2.9 Major PR
Closed 11 months ago 1 comment
openapi-processor
Bump org.springframework:spring-web from 6.2.1 to 6.2.9

nimalank7/Udemy-Spring-CRUD #148

6.2.1 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
nimalank7
Bump the maven-dependencies group with 6 updates

danielmroczka/mongodb-librarian #8

6.2.8 → 6.2.9 Patch PR
Open 11 months ago 1 comment
danielmroczka
Bump org.springframework:spring-web from 5.3.23 to 6.2.9

jadler-mocking/jadler #354

5.3.23 → 6.2.9 Major PR
Closed 11 months ago 1 comment
jadler-mocking
Bump the spring group with 2 updates

jesperancinha/organic-growth-app #68

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
jesperancinha
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

PCGen/pcgen #7377

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago 1 comment
PCGen
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

sullis/microbenchmarks-java #157

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
sullis
Bump the maven group across 1 directory with 6 updates

XDMtM69/linguist #10

4.3.20.RELEASE → 5.2.22.RELEASE Major PR
Open 11 months ago
XDMtM69
chore(deps): bump org.springframework:spring-web from 5.3.31 to 6.2.9

mjeanroy/springmvc-mustache #927

5.3.31 → 6.2.9 Major PR
Closed 11 months ago
mjeanroy
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

FraunhoferIOSB/FAAAST-Registry #308

6.2.8 → 6.2.9 Patch PR
Open 11 months ago 1 comment
FraunhoferIOSB
chore(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.9 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21438

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
dhis2
chore(deps): bump org.springframework:spring-web from 6.2.7 to 6.2.9

sonallux/spotify-web-api #486

6.2.7 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
sonallux
chore(deps): bump org.springframework:spring-web from 6.2.8 to 6.2.9 in /dhis-2/dhis-test-e2e

dhis2/dhis2-core #21437

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
dhis2
Bump org.springframework:spring-web from 6.2.8 to 6.2.9

hendisantika/Kotlin-DATA-REST #65

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
hendisantika
Bump org.springframework:spring-web from 6.1.12 to 6.2.9

AuDigitalHealth/lingo #12

6.1.12 → 6.2.9 Minor PR
Closed 11 months ago 1 comment
AuDigitalHealth
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /emaillist4

corock/jx #275

6.1.14 → 6.1.21 Patch PR
Merged 11 months ago
corock
build(deps): bump org.springframework:spring-web from 6.2.5 to 6.2.9

MTWGA/thoughtworks-code-review-tools #217

6.2.5 → 6.2.9 Patch PR
Open 11 months ago
MTWGA
Bump org.springframework:spring-web from 5.3.39 to 6.1.21

intersoftdatalabs-in/percussioncms #14

5.3.39 → 6.1.21 Major PR
Open 11 months ago
intersoftdatalabs-in
Bump org.springframework:spring-web from 6.2.8 to 6.2.9 in the java group

openviglet/turing #2337

6.2.8 → 6.2.9 Patch PR
Merged 11 months ago
openviglet
Bump org.springframework:spring-web from 6.2.5 to 6.2.9

SparkArmy/SparkArmyBot #220

6.2.5 → 6.2.9 Patch PR
Closed 11 months ago 1 comment
SparkArmy
Bump the spring group with 7 updates

ianrobrien/fakebank #707

6.2.8 → 6.2.9 Patch PR
Open 11 months ago
ianrobrien
Bump org.springframework:spring-web from 6.2.6 to 6.2.8 in /reports/spotbugs

thomasleplus/java-memory-safety #96

6.2.6 → 6.2.8 Patch PR
Open 11 months ago
thomasleplus
Bump org.springframework:spring-web from 6.0.10 to 6.1.21

ever-ag/sc-common-tiles-request #5

6.0.10 → 6.1.21 Minor PR
Open 11 months ago
ever-ag
Bump org.springframework:spring-web from 5.3.39 to 6.1.21 in /mvn/dependencies/testsuite/test/spring5

link-it/govway #232

5.3.39 → 6.1.21 Major PR
Closed 11 months ago 1 comment
link-it
chore(deps): bump the production-deps group with 9 updates

liquibase/liquibase #7114

5.3.39 → 6.0.0 Major PR
Open 11 months ago 6 comments
liquibase
Bump org.springframework:spring-web from 3.0.7.RELEASE to 6.1.21 in /dev/cnf/dependabot/check_this_in_if_it_changes

OpenLiberty/open-liberty #32127

3.0.7.RELEASE → 6.1.21 Major PR
Open 11 months ago
OpenLiberty
Bump org.springframework:spring-web from 6.2.2 to 6.2.8

Alfresco/alfresco-community-repo #3467

6.2.2 → 6.2.8 Patch PR
Closed 11 months ago 1 comment
Alfresco
Bump the maven group across 5 directories with 4 updates

openviglet/turing #2332

6.2.7 → 6.2.8 Patch PR
Closed 11 months ago
openviglet
build(deps-dev): bump org.springframework:spring-web from 5.3.21 to 6.1.21

FgForrest/Darwin #8

5.3.21 → 6.1.21 Major PR
Closed 11 months ago 1 comment
FgForrest
fix: bump the other-dependencies group across 1 directory with 18 updates

lsd-consulting/spring-wiremock-stub-generator #117

6.2.6 → 6.2.8 Patch PR
Open 11 months ago 1 comment
lsd-consulting
Bump the maven group across 2 directories with 3 updates

eryanwcp/ec #15

5.3.39 → 6.1.21 Major PR
Open 11 months ago
eryanwcp
Bump org.springframework:spring-web from 3.2.1.RELEASE to 6.1.21 in /testutils/ptest2

Scout24/hive #8

3.2.1.RELEASE → 6.1.21 Major PR
Open 11 months ago
Scout24
Bump org.springframework:spring-web from 4.0.5.RELEASE to 6.1.21

Scout24/spring-base64-url-decoder #7

4.0.5.RELEASE → 6.1.21 Major PR
Open 11 months ago
Scout24
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)