An open index of dependabot pull requests across open source projects.

org.springframework:spring-webmvc

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-webmvc
Total PRs:
517 Dependabot PRs
Latest PR:
about 2 months ago
Unique Repositories:
292 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Spring Framework Cross-site Scripting via JSP Form Tags
GHSA-957g-f97v-vppc CVE-2026-41846 MODERATE published 2 months ago • updated 9 days ago
Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary H...
Spring Framework Improper Path Limitation with Script View Templates
GHSA-4773-3jfm-qmx3 CVE-2026-22737 MODERATE published 5 months ago • updated 1 day ago
Use of Java scripting engine enabled (e.g. JRuby, Jython) template views in Spring MVC and Spring WebFlux applications can result in disclosure of ...
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
GHSA-cjpg-rgq5-fr37 CVE-2026-41853 MODERATE published 2 months ago • updated 4 days ago
Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7...
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
GHSA-hhm4-hwq6-3c6w CVE-2014-3625 MODERATE published about 4 years ago • updated 21 days ago
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows ...
Path traversal vulnerability in functional web frameworks
GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published almost 2 years ago • updated 3 days ago
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...
Recent PRs
Package Details
Name: org.springframework:spring-webmvc
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-webmvc
JSON API: View JSON
Security Advisories

24

Active advisories
CRITICAL 1
HIGH 8
MODERATE 13
LOW 2
View All maven Advisories
Package Information
Description:

Spring Web MVC

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 227,195
Dependent Packages: 4,621
Ranking: Top 0.003% by dependent repos Top 0.0156% by dependent pkgs
PR Status
Open 245 (47.4%)
Merged 105 (20.3%)
Closed 138 (26.7%)
PR Types
Major 194 (37.5%)
Minor 30 (5.8%)
Patch 264 (51.1%)