`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
516 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
291 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Path traversal vulnerability in functional web frameworks

GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published over 1 year ago • updated about 6 hours ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Improper Neutralization of Input During Web Page Generation in Spring Framework

GHSA-ff7p-jqjm-v66h CVE-2014-1904 MODERATE published about 4 years ago • updated about 1 month ago

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 befor...

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources

GHSA-6p4f-wcwh-5vvm CVE-2026-22745 MODERATE published about 1 month ago • updated 2 days ago

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application c...

Spring Framework Path Traversal vulnerability

GHSA-g5vr-rgqm-vf78 CVE-2024-38819 HIGH published over 1 year ago • updated 2 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Spring Framework MVC Applications Path Traversal Vulnerability

GHSA-r936-gwx5-v52f CVE-2025-41242 MODERATE published 10 months ago • updated 11 days ago

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An app...

View all 17 advisories

Recent PRs

RSS Feed

Bump org.springframework:spring-webmvc from 6.2.17 to 6.2.18

NASA-PDS/registry-api #766

6.2.17 → 6.2.18 Patch PR

Open about 1 month ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 6.2.18 in /page-controller

iluwatar/java-design-patterns #3476

6.2.5 → 6.2.18 Patch PR

Open about 1 month ago 2 comments

Bump the maven group across 29 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #7

5.0.3.RELEASE → 6.2.18 Major PR

Closed about 1 month ago 1 comment

Bump the maven group across 23 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #6

5.0.3.RELEASE → 6.2.18 Major PR

Closed about 1 month ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.11 to 6.2.18 in /Foundation/org.egovframe.rte.fdl.access

eGovFramework/egovframe-runtime #220

6.2.11 → 6.2.18 Patch PR

Closed about 1 month ago 1 comment

Bump the maven group across 19 directories with 9 updates

dhay3/spring #3

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR

Closed about 1 month ago 1 comment

Bump org.springframework:spring-webmvc from 7.0.6 to 7.0.7

a-anand-91119/Yellow-Pages #174

7.0.6 → 7.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the maven group across 2 directories with 2 updates

StevenKitavi/demoapp-freestyle #23

6.1.20 → 6.2.17 Minor PR

Closed about 2 months ago 1 comment

Bump the maven group across 5 directories with 4 updates

Alfresco/alfresco-community-repo #3990

7.0.2 → 7.0.6 Patch PR

Closed 2 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.15 to 6.2.17

skjolber/mockito-rest-spring #65

6.2.15 → 6.2.17 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.10 to 6.2.17

mvmaniac/basic-spring4 #13

6.2.10 → 6.2.17 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the maven group across 2 directories with 2 updates

CMSgov/qpp-conversion-tool #1620

6.2.12 → 6.2.17 Patch PR

Open 3 months ago 1 comment

Bump the maven group across 20 directories with 3 updates

preechapon250/azure-sdk-for-java #7

7.0.2 → 7.0.6 Patch PR

Closed 3 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.5 to 7.0.6

smallrye/smallrye-open-api #2510

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.39 to 6.2.10

tbadura/jokes #19

5.3.39 → 6.2.10 Major PR

Closed 3 months ago 2 comments

Bump org.springframework:spring-webmvc from 7.0.4 to 7.0.5

a-anand-91119/Yellow-Pages #164

7.0.4 → 7.0.5 Patch PR

Open 4 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.4 to 7.0.5

smallrye/smallrye-open-api #2487

7.0.4 → 7.0.5 Patch PR

Closed 4 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 46 updates

craftercms/craftercms #8551

7.0.3 → 7.0.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump org.springframework:spring-webmvc from 7.0.3 to 7.0.4

IodeSystems/typescript-generator #27

7.0.3 → 7.0.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 7.0.4

mjeanroy/junit-servers #969

5.3.31 → 7.0.4 Major PR

Closed 4 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.3 to 7.0.4

smallrye/smallrye-open-api #2482

7.0.3 → 7.0.4 Patch PR

Open 4 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 7.0.3

iluwatar/java-design-patterns #3432

6.2.5 → 7.0.3 Major PR

Open 4 months ago 1 comment

Bump the maven group across 2 directories with 6 updates

GlacierEQ/nem #1

4.3.30.RELEASE → 6.1.20 Major PR

Open 4 months ago 4 comments

Bump org.springframework:spring-webmvc from 7.0.2 to 7.0.3

a-anand-91119/Yellow-Pages #154

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.2 to 7.0.3

smallrye/smallrye-open-api #2452

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

Bump the maven group across 1 directory with 2 updates

dwaned/max-profit-calculator #87

6.1.16 → 6.2.10 Minor PR

Open 5 months ago 5 comments

chore: [DevOps] bump the production-major group across 1 directory with 9 updates

SAP/ai-sdk-java #701

6.2.12 → 7.0.2 Major PR

Closed 5 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 63 updates

craftercms/craftercms #8480

6.2.15 → 7.0.2 Major PR

Closed 5 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8479

6.2.15 → 7.0.2 Major PR

Open 5 months ago 4 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8478

6.2.15 → 7.0.2 Major PR

Open 6 months ago 7 comments

Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 3 comments

Bump the all-maven-deps group across 3 directories with 122 updates

QuocKhanh2002/craftercms #13

6.2.10 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 7.0.2

mjeanroy/springmvc-mustache #1014

5.3.31 → 7.0.2 Major PR

Closed 6 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.1 to 7.0.2

smallrye/smallrye-open-api #2436

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 1 comment

build(deps): bump the spring group across 1 directory with 13 updates

DSpace/DSpace #11620

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the spring group with 12 updates

DSpace/DSpace #11583

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.0 to 7.0.1

smallrye/smallrye-open-api #2420

7.0.0 → 7.0.1 Patch PR

Open 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 109 updates

craftercms/craftercms #8442

6.2.12 → 7.0.0 Major PR

Closed 7 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.12 to 6.2.13

JKatzwinkel/tla-es #502

6.2.12 → 6.2.13 Patch PR

Open 7 months ago 3 comments

build(deps): bump the spring group across 2 directories with 2 updates

nicollas1020/serverless_java #9

6.2.8 → 6.2.12 Patch PR

Open 7 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.23 to 6.2.10

kenu/okdevtv #107

5.3.23 → 6.2.10 Major PR

Open 7 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.2.10 → 6.2.12 Patch PR

Closed 8 months ago 1 comment

Bump the maven group across 3 directories with 18 updates

lefty1808/my-program-learning #2

4.3.3.RELEASE → 6.2.10 Major PR

Closed 8 months ago 1 comment

chore(deps): bump the spring group across 3 directories with 6 updates

aws/serverless-java-container #1569

6.2.8 → 6.2.12 Patch PR

Open 8 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.10 to 6.2.12

lbkulinski/cta4j-back-end #113

6.2.10 → 6.2.12 Patch PR

Open 8 months ago

Bump org.springframework:spring-webmvc from 6.2.11 to 6.2.12

a-anand-91119/Yellow-Pages #137

6.2.11 → 6.2.12 Patch PR

Merged 8 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.1 to 6.2.12

Ludy87/test_java #359

6.2.1 → 6.2.12 Patch PR

Open 8 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.11 to 6.2.12

JKatzwinkel/tla-es #494

6.2.11 → 6.2.12 Patch PR

Merged 8 months ago

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 244 (47.3%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 193 (37.4%)

Minor 30 (5.8%)

Patch 264 (51.2%)