Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 1 day ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Framework URL Parsing with Host Validation Vulnerability
GHSA-hgjh-9rj2-g67j CVE-2024-22259 HIGH published over 2 years ago • updated 2 minutes ago
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform val...
Spring Framework vulnerable to a reflected file download (RFD)
GHSA-6r3c-xf4w-jxjm CVE-2025-41234 MODERATE published about 1 year ago • updated about 20 hours ago
### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file downlo...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 1 day ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated 1 day ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
View all 12 advisories
Recent PRs
RSS Feed
chore(deps): bump org.springframework:spring-web from 6.2.6 to 6.2.8

okta/okta-auth-java #745

6.2.6 → 6.2.8 Patch PR
Open 11 months ago
okta
Bump org.springframework:spring-web from 5.3.39 to 6.1.21 in /design-and-architecture/java-modernization/java8-app

aws-samples/sample-ai-powered-sdlc-patterns-with-aws #19

5.3.39 → 6.1.21 Major PR
Closed 12 months ago 2 comments
aws-samples
Bump org.springframework:spring-web from 6.1.12 to 6.2.8

AuDigitalHealth/lingo #4

6.1.12 → 6.2.8 Minor PR
Open 12 months ago
AuDigitalHealth
Bump the maven group across 4 directories with 4 updates

panthers-labs-pvt-ltd/sentinel #4

6.2.1 → 6.2.8 Patch PR
Open 12 months ago
panthers-labs-pvt-ltd
Bump org.springframework:spring-web from 3.0.7.RELEASE to 6.1.21 in /components/governance/org.wso2.carbon.governance.rest.api

wso2/carbon-governance #380

3.0.7.RELEASE → 6.1.21 Major PR
Closed 12 months ago 1 comment
wso2
Bump org.springframework:spring-web from 3.0.2.RELEASE to 6.1.21 in /gameoflife-web

Bhaldwarf/game-of-life #4

3.0.2.RELEASE → 6.1.21 Major PR
Open 12 months ago
Bhaldwarf
Bump org.springframework:spring-web from 6.2.2 to 6.2.8 in /s-pipes-parent

kbss-cvut/s-pipes #404

6.2.2 → 6.2.8 Patch PR
Open 12 months ago
kbss-cvut
Bump org.springframework:spring-web from 6.2.2 to 6.2.8

DIGI-UW/OpenELIS-Global-2 #2112

6.2.2 → 6.2.8 Patch PR
Open 12 months ago
DIGI-UW
Bump org.springframework:spring-web from 5.3.39 to 6.1.21

jenkinsci/netsparker-cloud-scan-plugin #20

5.3.39 → 6.1.21 Major PR
Open 12 months ago
jenkinsci
[PF-2987]: Bump the minor-patch-dependencies group with 8 updates

DataBiosphere/stairway #169

6.2.7 → 6.2.8 Patch PR
Merged 12 months ago 3 comments
DataBiosphere
Bump the all-minor-patch group with 15 updates

navikt/arkiv-mock #34

6.2.7 → 6.2.8 Patch PR
Open 12 months ago 1 comment
navikt
Bump org.springframework:spring-web from 6.2.5 to 6.2.8

SparkArmy/SparkArmyBot #215

6.2.5 → 6.2.8 Patch PR
Closed 12 months ago 1 comment
SparkArmy
Bump org.springframework:spring-web from 6.2.7 to 6.2.8 in /backend

CDCgov/prime-simplereport #8961

6.2.7 → 6.2.8 Patch PR
Open 12 months ago
CDCgov
Bump org.springframework:spring-web from 4.3.17.RELEASE to 6.1.21

AarenWang/haifa #55

4.3.17.RELEASE → 6.1.21 Major PR
Open 12 months ago
AarenWang
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

wagnerfusca/ExemploCrudJSF #13

6.1.14 → 6.1.21 Patch PR
Merged 12 months ago
wagnerfusca
Bump the maven group across 3 directories with 3 updates

panthers-labs-pvt-ltd/sentinel #2

6.2.1 → 6.2.8 Patch PR
Closed 12 months ago
panthers-labs-pvt-ltd
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /o11nplugin-vro-core

vmware/vrealize-orchestrator-plugin-for-alb #270

6.1.14 → 6.1.21 Patch PR
Merged 12 months ago
vmware
Bump org.springframework:spring-web from 5.3.39 to 6.1.21 in /datahub-build/datahub-bom-spring

diziaq/sap__datahub #3

5.3.39 → 6.1.21 Major PR
Open 12 months ago
diziaq
Bump the maven group across 3 directories with 7 updates

danielmroczka/mongodb-librarian #6

3.2.5.RELEASE → 4.3.20.RELEASE Major PR
Closed 12 months ago 1 comment
danielmroczka
Bump org.springframework:spring-web from 3.2.5.RELEASE to 6.1.21 in /web

danielmroczka/mongodb-librarian #3

3.2.5.RELEASE → 6.1.21 Major PR
Closed 12 months ago 1 comment
danielmroczka
Bump org.springframework:spring-web from 3.2.0.RELEASE to 6.1.21 in /Highstock/exporting-server/java/highcharts-export/highcharts-export-web

kunal15595/grabthemarket #2

3.2.0.RELEASE → 6.1.21 Major PR
Open 12 months ago
kunal15595
fix: bump the other-dependencies group across 1 directory with 17 updates

lsd-consulting/spring-wiremock-stub-generator #116

6.2.6 → 6.2.8 Patch PR
Open 12 months ago
lsd-consulting
Bump the spring group across 1 directory with 25 updates

DSpace/DSpace #10946

6.2.7 → 6.2.8 Patch PR
Merged 12 months ago
DSpace
build(deps): bump the maven group across 1 directory with 2 updates

Hack23/cia #7470

5.3.39 → 6.1.21 Major PR
Open 12 months ago
Hack23
Bump org.springframework:spring-web from 6.0.11 to 6.1.21

aye-min-soe/proton #3

6.0.11 → 6.1.21 Minor PR
Open 12 months ago
aye-min-soe
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in the maven group across 1 directory

offsoc/cloudstack #5

6.1.20 → 6.1.21 Patch PR
Open 12 months ago
offsoc
Bump org.springframework:spring-web from 6.0.0 to 6.1.21 in /p1

buguyizu/p1 #28

6.0.0 → 6.1.21 Minor PR
Merged 12 months ago
buguyizu
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

jmkeyes/opensaml-message-converter #3

6.1.14 → 6.1.21 Patch PR
Merged 12 months ago
jmkeyes
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

bitblit/Chatty #6

6.1.20 → 6.1.21 Patch PR
Open 12 months ago
bitblit
Bump org.springframework:spring-web from 6.2.6 to 6.2.8

navikt/tilbakemeldingsmottak-api #280

6.2.6 → 6.2.8 Patch PR
Open 12 months ago
navikt
Bump org.springframework:spring-web from 6.2.6 to 6.2.8

navikt/soknadsmottaker #145

6.2.6 → 6.2.8 Patch PR
Merged 12 months ago
navikt
Bump org.springframework:spring-web from 6.0.23 to 6.2.8 in /api-tests

Ensono/stacks-java-cqrs-events #809

6.0.23 → 6.2.8 Minor PR
Closed 12 months ago 1 comment
Ensono
Bump org.springframework:spring-web from 6.2.1 to 6.2.8 in /soot-infoflow-summaries

secure-software-engineering/FlowDroid #822

6.2.1 → 6.2.8 Patch PR
Merged 12 months ago
secure-software-engineering
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

inrupt/solid-client-java #2154

6.2.7 → 6.2.8 Patch PR
Merged 12 months ago
inrupt
Bump org.springframework:spring-web from 6.2.3 to 6.2.8

navikt/innsending-api #292

6.2.3 → 6.2.8 Patch PR
Open 12 months ago
navikt
fix: bump the other-dependencies group across 1 directory with 16 updates

lsd-consulting/spring-wiremock-stub-generator #115

6.2.6 → 6.2.8 Patch PR
Closed 12 months ago 3 comments
lsd-consulting
Bump org.springframework:spring-web from 5.3.23 to 6.2.8

ghas-lab-templates/SecurityShepherd #34

5.3.23 → 6.2.8 Major PR
Closed 12 months ago 1 comment
ghas-lab-templates
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 5 updates

secureCodeBox/secureCodeBox #3084

6.2.7 → 6.2.8 Patch PR
Merged 12 months ago 2 comments
secureCodeBox
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

AdmiralXy/spring-admiralxy-commons #108

6.2.7 → 6.2.8 Patch PR
Open 12 months ago
AdmiralXy
Bump the spring group with 12 updates

DSpace/DSpace #10911

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago 1 comment
DSpace
Bump the spring group with 12 updates

DSpace/DSpace #10907

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
DSpace
Bump the spring group with 12 updates

DSpace/DSpace #10903

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
DSpace
build(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /Topics/Spring/Spring-MVC/TopMovies

2KAbhishek/Wipro-PJP #277

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
2KAbhishek
Bump org.springframework:spring-web from 5.3.39 to 6.2.8

adaptris/interlok-cache #681

5.3.39 → 6.2.8 Major PR
Closed about 1 year ago 2 comments
adaptris
Bump org.springframework:spring-web from 5.3.39 to 6.2.8

adaptris/interlok-cache #677

5.3.39 → 6.2.8 Major PR
Closed about 1 year ago 2 comments
adaptris
Bump org.springframework:spring-web from 5.3.23 to 6.2.8

bgalek/url-signer #154

5.3.23 → 6.2.8 Major PR
Closed about 1 year ago 2 comments
bgalek
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.8

apache/struts-examples #467

6.2.5 → 6.2.8 Patch PR
Closed about 1 year ago 1 comment
apache
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

AAdewunmi/blog-app-project #1

6.2.7 → 6.2.8 Patch PR
Merged about 1 year ago
AAdewunmi
Bump the maven group across 1 directory with 3 updates

Reality2byte/struts #2

6.0.13 → 6.1.20 Minor PR
Closed about 1 year ago 1 comment
Reality2byte
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

tattrung15/SpringSecurity #40

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
tattrung15
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)