Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
939 Dependabot PRs
Latest PR:
18 days ago
Unique Repositories:
459 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Improper Privilege Management in Spring Framework
GHSA-gfwj-fwqj-fp3v CVE-2021-22118 HIGH published about 4 years ago • updated 13 days ago
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalatio...
Pivotal Spring Framework contains unsafe Java deserialization methods
GHSA-4wrc-f8pq-fpqp CVE-2016-1000027 CRITICAL published about 4 years ago • updated about 1 month ago
Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data...
Cross-Site Request Forgery in Spring Framework
GHSA-g6hf-f9cq-q7w7 CVE-2013-6429 MODERATE published about 4 years ago • updated about 1 month ago
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resol...
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published over 2 years ago • updated about 16 hours ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Spring Framework DoS via conditional HTTP request
GHSA-2rmj-mq67-h97g CVE-2024-38809 MODERATE published over 1 year ago • updated 11 days ago
### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack. ### Affected Spring...
View all 12 advisories
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
chore(deps): bump org.springframework:spring-web from 6.1.1 to 6.2.12

edoatley/country-api #11

6.1.1 → 6.2.12 Minor PR
Open 7 months ago 3 comments
edoatley
Bump org.springframework:spring-web from 6.1.4 to 6.2.11

Vipin-Sharma/MSG #91

6.1.4 → 6.2.11 Minor PR
Closed 9 months ago 1 comment
Vipin-Sharma
chore(deps)(deps): bump org.springframework:spring-web from 6.0.11 to 6.2.10

Lucasantunesribeiro/Sistema_de_Gestao_de_Pedidos_Distribu-do_com_Event_Sourcing #44

6.0.11 → 6.2.10 Minor PR
Closed 9 months ago 1 comment
Lucasantunesribeiro
Bump org.springframework:spring-web from 6.0.23 to 6.2.10

avereon/seenc #12

6.0.23 → 6.2.10 Minor PR
Merged 10 months ago
avereon
Bump org.springframework:spring-web from 6.1.12 to 6.2.10

AuDigitalHealth/lingo #16

6.1.12 → 6.2.10 Minor PR
Closed 10 months ago 1 comment
AuDigitalHealth
chore(deps): Bump the maven group across 2 directories with 2 updates

CMSgov/qpp-conversion-tool #1552

6.1.21 → 6.2.9 Minor PR
Closed 10 months ago
CMSgov
Bump org.springframework:spring-web from 6.0.0 to 6.1.21 in /TEST-ELASTIC

namerajendrasingh/TEST-ELSTIC #8

6.0.0 → 6.1.21 Minor PR
Merged 10 months ago
namerajendrasingh
Bump org.springframework:spring-web from 6.0.0 to 6.1.21

hbzhou/java-jdk-sample #8

6.0.0 → 6.1.21 Minor PR
Open 10 months ago
hbzhou
Bump org.springframework:spring-web from 6.1.12 to 6.2.9

AuDigitalHealth/lingo #12

6.1.12 → 6.2.9 Minor PR
Closed 11 months ago 1 comment
AuDigitalHealth
Bump org.springframework:spring-web from 6.0.10 to 6.1.21

ever-ag/sc-common-tiles-request #5

6.0.10 → 6.1.21 Minor PR
Open 11 months ago
ever-ag
Bump org.springframework:spring-web from 6.1.12 to 6.2.8

AuDigitalHealth/lingo #4

6.1.12 → 6.2.8 Minor PR
Open 11 months ago
AuDigitalHealth
Bump org.springframework:spring-web from 6.0.11 to 6.1.21

aye-min-soe/proton #3

6.0.11 → 6.1.21 Minor PR
Open 11 months ago
aye-min-soe
Bump org.springframework:spring-web from 6.0.0 to 6.1.21 in /p1

buguyizu/p1 #28

6.0.0 → 6.1.21 Minor PR
Merged 12 months ago
buguyizu
Bump org.springframework:spring-web from 6.0.23 to 6.2.8 in /api-tests

Ensono/stacks-java-cqrs-events #809

6.0.23 → 6.2.8 Minor PR
Closed 12 months ago 1 comment
Ensono
Bump the maven group across 1 directory with 3 updates

Reality2byte/struts #2

6.0.13 → 6.1.20 Minor PR
Closed 12 months ago 1 comment
Reality2byte
Bump org.springframework:spring-web from 6.0.19 to 6.1.21 in /org.eclipse.winery.generators.ia/src/main/resources/template/project

winery/winery #772

6.0.19 → 6.1.21 Minor PR
Open 12 months ago
winery
Bump the all-minor-patch group across 1 directory with 13 updates

navikt/arkiv-mock #33

6.1.3 → 6.2.7 Minor PR
Merged 12 months ago
navikt
Bump org.springframework:spring-web from 6.0.0 to 6.1.14

SeonDH/demo.batch #2

6.0.0 → 6.1.14 Minor PR
Open 12 months ago
SeonDH
Bump org.springframework:spring-web from 6.0.23 to 6.2.7 in /api-tests

Ensono/stacks-java-cqrs-events #798

6.0.23 → 6.2.7 Minor PR
Closed 12 months ago 1 comment
Ensono
Bump the maven group across 1 directory with 6 updates

nathantypanski/NTL-Lunar-Mapping-and-Modeling-Portal #1

4.0.5.RELEASE → 4.3.20.RELEASE Minor PR
Open about 1 year ago
nathantypanski
Bump org.springframework:spring-web from 6.0.18 to 6.1.14 in /target/m2e-wtp/web-resources/META-INF/maven/Hello/Demo

tattrung15/SpringSecurity #38

6.0.18 → 6.1.14 Minor PR
Merged about 1 year ago
tattrung15
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/StudentOut

2KAbhishek/Wipro-PJP #265

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/TopMovies

2KAbhishek/Wipro-PJP #264

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/TopMoviesEach

2KAbhishek/Wipro-PJP #263

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/Spring-MVC/HelloWorldMVC

2KAbhishek/Wipro-PJP #262

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/CashBackOffer

2KAbhishek/Wipro-PJP #261

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
build(deps): bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /Topics/Spring/SpringMVC-With-Hibernate/StudentIn

2KAbhishek/Wipro-PJP #259

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
2KAbhishek
Bump org.springframework:spring-web from 6.0.0 to 6.1.14 in /samples/Maven POM/filenames

classicvalues/linguist #32

6.0.0 → 6.1.14 Minor PR
Closed about 1 year ago 2 comments
classicvalues
build(deps): bump org.springframework:spring-web from 6.0.9 to 6.1.14

elimu-ai/webapp #2196

6.0.9 → 6.1.14 Minor PR
Closed about 1 year ago
elimu-ai
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /test-webservices-tomcat/country-service

axonivy/test-webservices #19

6.0.23 → 6.1.14 Minor PR
Closed about 1 year ago 1 comment
axonivy
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in the maven group across 1 directory

uthrasri/expat_new #13

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
uthrasri
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

forcedotcom/salesforce-commerce-intelligence-jdbc #8

6.0.23 → 6.1.14 Minor PR
Closed about 1 year ago 1 comment
forcedotcom
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

AndriyKalashnykov/movie-fun #6

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
AndriyKalashnykov
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

atealxt/crm #44

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
atealxt
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /jaxrs

melanj/my-spare-time-work #9

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
melanj
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

wagnerfusca/ExemploCrudJSF #11

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
wagnerfusca
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /ApplicationAPI

b16nicbr/Application #9

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
b16nicbr
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /restTemplate

apetrovskiy/moreJavaSamples #56

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
apetrovskiy
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

uppalabharath/mflix #17

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
uppalabharath
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /seguranca/alura-shows

erickosma/alura #48

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
erickosma
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /examples/JavaEEServletContainerExample/jetty/webapps/jpetstore/META-INF/maven/org.mybatis/jpetstore

kieker-monitoring/kieker #2928

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
kieker-monitoring
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

Moustafa-Elgammal/SpringRest #6

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
Moustafa-Elgammal
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /pulp_maven/tests/assets/simple-project

pulp/pulp_maven #275

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago 2 comments
pulp
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /o11nplugin-vro-core

vmware/vrealize-orchestrator-plugin-for-alb #266

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
vmware
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

pallavJha/whatnot #24

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
pallavJha
Bump org.springframework:spring-web from 6.0.23 to 6.1.14 in /reactive-java

chris0103/java #35

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
chris0103
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

castle/castle-java #151

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago
castle
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

Lmy0217/XueBaLibrary #37

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
Lmy0217
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

avereon/seenc #8

6.0.23 → 6.1.14 Minor PR
Open about 1 year ago 2 comments
avereon
Bump org.springframework:spring-web from 6.0.23 to 6.1.14

LajosPolya/Spotify-API-Wrapper #7

6.0.23 → 6.1.14 Minor PR
Merged about 1 year ago
LajosPolya
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 408 (43.5%)
Merged 186 (19.8%)
Closed 267 (28.4%)
PR Types
Major 275 (29.3%)
Minor 62 (6.6%)
Patch 524 (55.8%)