Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-web

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-web
Total PRs:
886 Dependabot PRs
Latest PR:
12 days ago
Unique Repositories:
435 repositories
Unique Repos (30 days):
7 repositories
Security Advisories
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
GHSA-ccgv-vj62-xf9h CVE-2024-22243 HIGH published almost 2 years ago • updated 5 days ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Pivotal Spring Framework DoS Attack with XML Input
GHSA-6v7w-535j-rq5m CVE-2015-3192 MODERATE published about 7 years ago • updated about 1 month ago
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, whic...
Spring Framework URL Parsing with Host Validation
GHSA-2wrp-6fg6-hmc5 CVE-2024-22262 HIGH published over 1 year ago • updated about 24 hours ago
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on th...
Spring Framework DataBinder Case Sensitive Match Exception
GHSA-4gc7-5j7h-4qph CVE-2024-38820 MODERATE published about 1 year ago • updated 6 days ago
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent e...
Improper Neutralization of Input During Web Page Generation in Spring Framework
GHSA-xjrf-8x4f-43h4 CVE-2013-6430 MODERATE published over 3 years ago • updated 30 days ago
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escap...
View all 12 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

7.0.1 → 7.0.2 Patch PR
Open 16 days ago 3 comments
craftercms
Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.1 → 7.0.2 Patch PR
Closed 23 days ago 1 comment
craftercms
Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.1 → 7.0.2 Patch PR
Closed 25 days ago 1 comment
craftercms
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 4 updates

secureCodeBox/secureCodeBox #3418

7.0.1 → 7.0.2 Patch PR
Open 26 days ago 4 comments
secureCodeBox
[DT-400-gradle]: Bump the gradle-patch-updates group with 4 updates

DataBiosphere/stairway #208

7.0.1 → 7.0.2 Patch PR
Open 27 days ago 2 comments
DataBiosphere
build(deps): bump the spring group across 1 directory with 13 updates

DSpace/DSpace #11620

6.2.12 → 6.2.13 Patch PR
Closed about 2 months ago 1 comment
DSpace
build(deps): bump the spring group with 12 updates

DSpace/DSpace #11583

6.2.12 → 6.2.13 Patch PR
Closed about 2 months ago 1 comment
DSpace
Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.2.10 → 6.2.12 Patch PR
Closed 2 months ago 1 comment
QuocKhanh2002
chore(deps): bump the low-risk group in /api-tests with 23 updates

Ensono/stacks-java-cqrs #792

6.2.9 → 6.2.12 Patch PR
Closed 2 months ago 1 comment
Ensono
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 2 updates

secureCodeBox/secureCodeBox #3333

6.2.11 → 6.2.12 Patch PR
Open 3 months ago 2 comments
secureCodeBox
Bump org.springframework:spring-web from 6.2.5 to 6.2.12

SparkArmy/SparkArmyBot #228

6.2.5 → 6.2.12 Patch PR
Open 3 months ago
SparkArmy
chore(deps): bump the low-risk group across 1 directory with 25 updates

Ensono/stacks-java-cqrs #785

6.2.9 → 6.2.11 Patch PR
Closed 3 months ago 1 comment
Ensono
Build(deps-dev): Bump org.springframework:spring-web from 6.2.10 to 6.2.11

apache/struts-examples #503

6.2.10 → 6.2.11 Patch PR
Closed 3 months ago 1 comment
apache
build(deps): Bump org.springframework:spring-web from 6.1.14 to 6.1.21 in /form-spring

OpenFeign/feign #3070

6.1.14 → 6.1.21 Patch PR
Open 3 months ago
OpenFeign
build(deps): bump the low-risk group across 1 directory with 25 updates

Ensono/stacks-java #1526

6.2.9 → 6.2.11 Patch PR
Open 3 months ago
Ensono
Bump org.springframework:spring-web from 6.2.10 to 6.2.11 in /dashgit-updater

javiertuya/dashgit #229

6.2.10 → 6.2.11 Patch PR
Closed 3 months ago 2 comments
javiertuya
Bump the all-minor-patch group with 18 updates

navikt/soknadsmottaker #155

6.2.10 → 6.2.11 Patch PR
Open 3 months ago
navikt
Bump the all-minor-patch group with 53 updates

navikt/tilbakemeldingsmottak-api #288

6.2.9 → 6.2.11 Patch PR
Open 3 months ago
navikt
Bump the spring group with 28 updates

DSpace/DSpace #11391

6.2.10 → 6.2.11 Patch PR
Merged 3 months ago
DSpace
Bump the spring group with 25 updates

DSpace/DSpace #11373

6.2.10 → 6.2.11 Patch PR
Merged 3 months ago
DSpace
Bump the spring group with 28 updates

DSpace/DSpace #11365

6.2.10 → 6.2.11 Patch PR
Open 3 months ago
DSpace
Bump the maven-dependencies group across 1 directory with 27 updates

Blackdread/rest-filter #397

6.2.3 → 6.2.11 Patch PR
Open 3 months ago
Blackdread
Bump the all-minor-patch group with 11 updates

navikt/arkiv-mock #43

6.2.10 → 6.2.11 Patch PR
Open 3 months ago
navikt
Bump the all-maven-deps group across 3 directories with 87 updates

QuocKhanh2002/craftercms #2

6.2.10 → 6.2.11 Patch PR
Open 3 months ago
QuocKhanh2002
chore(deps): bump the low-risk group across 1 directory with 22 updates

Ensono/stacks-java-cqrs #777

6.2.9 → 6.2.11 Patch PR
Open 3 months ago 1 comment
Ensono
build(deps): bump the low-risk group across 1 directory with 23 updates

Ensono/stacks-java #1524

6.2.9 → 6.2.11 Patch PR
Open 3 months ago 1 comment
Ensono
Bump the gradle-version-updates group across 1 directory with 9 updates

secureCodeBox/secureCodeBox #3299

6.2.10 → 6.2.11 Patch PR
Open 3 months ago 3 comments
secureCodeBox
Bump the maven-security-patches group across 1 directory with 6 updates

FME-MS/fme-api #12

6.2.6 → 6.2.11 Patch PR
Open 4 months ago
FME-MS
Bump the all-maven-deps group across 3 directories with 78 updates

QuocKhanh2002/craftercms #1

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
QuocKhanh2002
chore(deps): bump the low-risk group across 1 directory with 21 updates

Ensono/stacks-java-cqrs #774

6.2.9 → 6.2.11 Patch PR
Open 4 months ago 1 comment
Ensono
Bump the maven-security-patches group across 1 directory with 5 updates

FME-MS/fme-api #11

6.2.6 → 6.2.11 Patch PR
Closed 4 months ago 1 comment
FME-MS
build(deps): bump the low-risk group across 1 directory with 22 updates

Ensono/stacks-java #1523

6.2.9 → 6.2.11 Patch PR
Open 4 months ago 1 comment
Ensono
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2332

6.2.10 → 6.2.11 Patch PR
Merged 4 months ago
inrupt
Bump the all-maven-deps group across 2 directories with 46 updates

craftercms/craftercms #8353

6.2.10 → 6.2.11 Patch PR
Merged 4 months ago 1 comment
craftercms
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

avereon/seenc #18

6.2.10 → 6.2.11 Patch PR
Merged 4 months ago
avereon
build(deps): bump org.springframework:spring-web from 6.2.10 to 6.2.11

getyourguide/openapi-validation-java #261

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
getyourguide
build(deps-dev): bump org.springframework:spring-web from 6.2.8 to 6.2.11 in /api-tests

Ensono/stacks-java-cqrs-events #879

6.2.8 → 6.2.11 Patch PR
Open 4 months ago
Ensono
Bump org.springframework:spring-web from 6.2.9 to 6.2.11

oracle/coherence-spring-sockshop-sample #297

6.2.9 → 6.2.11 Patch PR
Open 4 months ago 1 comment
oracle
build(deps): bump the low-risk group across 1 directory with 18 updates

Ensono/stacks-java #1520

6.2.9 → 6.2.11 Patch PR
Open 4 months ago 1 comment
Ensono
Bump the gradle-version-updates group across 1 directory with 5 updates

secureCodeBox/secureCodeBox #3276

6.2.10 → 6.2.11 Patch PR
Closed 4 months ago 3 comments
secureCodeBox
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.11

JCgH4164838Gh792C124B5/struts-examples #44

6.2.5 → 6.2.11 Patch PR
Closed 4 months ago 1 comment
JCgH4164838Gh792C124B5
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

BeatrixZselezny/Police-simulation-game-project #102

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
BeatrixZselezny
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2327

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
inrupt
Bump org.springframework:spring-web from 6.2.10 to 6.2.11

inrupt/solid-client-java #2315

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
inrupt
Build(deps-dev): Bump org.springframework:spring-web from 6.2.5 to 6.2.11

mkheck/migrate-struts #9

6.2.5 → 6.2.11 Patch PR
Open 4 months ago
mkheck
Bump org.springframework:spring-web from 6.2.2 to 6.2.11

dungeon-hub/dungeon-hub-api #40

6.2.2 → 6.2.11 Patch PR
Open 4 months ago
dungeon-hub
[DT-400-gradle]: Bump the gradle-patch-updates group with 6 updates

DataBiosphere/stairway #180

6.2.10 → 6.2.11 Patch PR
Open 4 months ago 1 comment
DataBiosphere
chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #581

6.2.10 → 6.2.11 Patch PR
Open 4 months ago
SAP
Bump the java group with 14 updates

openviglet/turing #2380

6.2.10 → 6.2.11 Patch PR
Merged 4 months ago
openviglet
Bump the maven group across 16 directories with 8 updates

dhay3/spring #1

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR
Open 4 months ago
dhay3
Package Details
Name: org.springframework:spring-web
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-web
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 1
HIGH 4
MODERATE 7
View All maven Advisories
Package Information
Description:

Spring Web

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
8 months ago
Dependent Repos: 153,377
Dependent Packages: 6,673
Ranking: Top 0.0054% by dependent repos Top 0.0092% by dependent pkgs
PR Status
Open 396 (44.7%)
Merged 185 (20.9%)
Closed 227 (25.6%)
PR Types
Major 249 (28.1%)
Patch 497 (56.1%)
Minor 62 (7.0%)