Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated 1 day ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 1 day ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Spring Framework Cross Site Tracing (XST)
GHSA-9gcm-f4x3-8jpw CVE-2018-11039 MODERATE published over 7 years ago • updated 1 day ago
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change t...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated less than a minute ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published over 2 years ago • updated less than a minute ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
View all 12 advisories
Recent PRs
RSS Feed
Bump org.springframework:spring-web from 4.0.5.RELEASE to 6.1.21 in /samples/Maven POM/filenames in the maven group across 1 directory

XDMtM69/linguist #2

4.0.5.RELEASE → 6.1.21 Major PR
Open about 1 year ago 2 comments
XDMtM69
Bump org.springframework:spring-web from 5.3.33 to 6.1.21

esentri/domainlifecycles #38

5.3.33 → 6.1.21 Major PR
Closed about 1 year ago
esentri
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

OSGP/open-smart-grid-platform #1595

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago 3 comments
OSGP
chore(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21

specmatic/specmatic #1913

6.1.14 → 6.1.21 Patch PR
Closed about 1 year ago
specmatic
Bump org.springframework:spring-web from 6.1.6 to 6.1.21 in /jag-ccd-application

jianmingtu/copilot-ccd #7

6.1.6 → 6.1.21 Patch PR
Open about 1 year ago
jianmingtu
Bump org.springframework:spring-web from 6.1.8 to 6.1.21 in /web

sarvex/game-of-life #196

6.1.8 → 6.1.21 Patch PR
Open about 1 year ago
sarvex
Bump org.springframework:spring-web from 6.2.2 to 6.2.8

dungeon-hub/dungeon-hub-api #33

6.2.2 → 6.2.8 Patch PR
Open about 1 year ago
dungeon-hub
Bump org.springframework:spring-web from 6.1.12 to 6.1.21 in /roda-core/roda-core-tests

keeps/roda #3442

6.1.12 → 6.1.21 Patch PR
Closed about 1 year ago
keeps
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /samples/client/petstore/java/resttemplate-jakarta in the maven group across 1 directory

paulpham157/openapi-generator #5

6.1.20 → 6.1.21 Patch PR
Closed about 1 year ago 2 comments
paulpham157
build(deps): bump org.springframework:spring-web from 6.1.20 to 6.1.21 in the maven group across 1 directory

offsoc/cloudstack #25

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
offsoc
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /web-client

Cityopt/cityopt #53

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
Cityopt
build(deps): bump org.springframework:spring-web from 6.1.20 to 6.1.21

InseeFr/ARC #118

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
InseeFr
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /code/mustache-test in the maven group across 1 directory

axymthr/notebook #36

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
axymthr
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /super

OSGP/open-smart-grid-platform #1594

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
OSGP
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

vlad-yurkevich/Java2020_T2 #17

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
vlad-yurkevich
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /trpcSpring

skyguard1/trpc #42

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
skyguard1
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

skjolber/mockito-rest-spring #57

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
skjolber
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

boaglio/mongodb-java-springdata-cloud-casadocodigo #17

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
boaglio
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /terekaSpring

skyguard1/teraka #42

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
skyguard1
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /dapr-spring

dapr/java-sdk #1424

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
dapr
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /redisson

redisson/redisson #6644

6.1.20 → 6.1.21 Patch PR
Closed about 1 year ago 1 comment
redisson
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

inpercima/rest-api #10

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
inpercima
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /hyperjaxb/ejb/samples/customerservice-cxf

highsource/jaxb-tools #633

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
highsource
Bump org.springframework:spring-web from 6.2.7 to 6.2.8

RWS/tridion-dxd-mcp-server #1

6.2.7 → 6.2.8 Patch PR
Open about 1 year ago
RWS
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /_import/camunda-platform-7-custom-batch/examples/example-simple

holunda-io/c7 #106

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
holunda-io
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory

krishnprakash/codeql #354

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
krishnprakash
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /samples/Maven POM/filenames

sarvex/linguist #28

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago 1 comment
sarvex
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /jsf

guillermolam/tutorials #34

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
guillermolam
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

Michael-Kochis/RevatureHeroes #29

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
Michael-Kochis
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /Services

rickardhm/sudokoresolver #20

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
rickardhm
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /reactive-java

chris0103/java #38

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
chris0103
Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /src/backend/libs/efiling-bom

jianmingtu/jag-file-submission #12

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
jianmingtu
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

nchantreau/spring-mvc #18

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
nchantreau
build(deps): bump org.springframework:spring-web from 6.1.14 to 6.1.21

asishrs/angular-spring-mongo #86

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
asishrs
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

laravelshao/tech-learning #56

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
laravelshao
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

tyler-technologies-oss/activemq #12

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
tyler-technologies-oss
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

Realiserad/servlet-logging-filter #8

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
Realiserad
build(deps): Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /spring

OpenFeign/feign #2918

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago 1 comment
OpenFeign
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

LajosPolya/Spotify-API-Wrapper #8

6.1.14 → 6.1.21 Patch PR
Merged about 1 year ago
LajosPolya
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /onlineshopping

a-anand-91119/E-Kart #93

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
a-anand-91119
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /samples/client/petstore/java/resttemplate-jakarta

OpenAPITools/openapi-generator #21413

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
OpenAPITools
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

giovannicuccu/dockerexperiments #34

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
giovannicuccu
Bump org.springframework:spring-web from 6.1.3 to 6.1.21 in /billion-data-subtable/mds-subtable-common/mds-subtable-base

snorlaxy213/develop-best-demo #16

6.1.3 → 6.1.21 Patch PR
Open about 1 year ago
snorlaxy213
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

jianshaow/tracing-example #33

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
jianshaow
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /source

The4thLaw/demyo #233

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
The4thLaw
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

yueliangrensheng/SSMWork #40

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
yueliangrensheng
Bump org.springframework:spring-web from 6.1.20 to 6.1.21 in /server

Lmy0217/BuildingNotice #27

6.1.20 → 6.1.21 Patch PR
Merged about 1 year ago
Lmy0217
Bump org.springframework:spring-web from 6.1.20 to 6.1.21

knextsunj/cms-spring #41

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
knextsunj
build(deps): bump org.springframework:spring-web from 6.1.20 to 6.1.21

LuJie0403/iterlife-zeus #78

6.1.20 → 6.1.21 Patch PR
Open about 1 year ago
LuJie0403
Bump org.springframework:spring-web from 6.1.14 to 6.1.21

onergang/spring-web #14

6.1.14 → 6.1.21 Patch PR
Open about 1 year ago
onergang
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)