`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
517 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
292 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Path traversal vulnerability in functional web frameworks

GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published almost 2 years ago • updated 7 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Improper Neutralization of Input During Web Page Generation in Spring Framework

GHSA-ff7p-jqjm-v66h CVE-2014-1904 MODERATE published about 4 years ago • updated about 1 month ago

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 befor...

RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application

GHSA-8wx2-9q48-vm9r CVE-2020-5398 HIGH published over 6 years ago • updated about 23 hours ago

In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerabl...

Spring MVC and WebFlux has Server Sent Event stream corruption

GHSA-6hcq-hmm3-jj3c CVE-2026-22735 LOW published 3 months ago • updated 1 day ago

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: ...

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

GHSA-hhm4-hwq6-3c6w CVE-2014-3625 MODERATE published about 4 years ago • updated 29 days ago

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows ...

View all 17 advisories

Recent PRs

RSS Feed

chore(deps): Bump org.springframework:spring-webmvc from 5.3.33 to 6.1.14

apache/iotdb-extras #35

5.3.33 → 6.1.14 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.31 to 6.1.14 in /service-provider

Opetushallitus/otuva #25

5.3.31 → 6.1.14 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.27 to 6.1.14 in /Batch/org.egovframe.rte.bat.core

eGovFramework/egovframe-runtime #173

5.3.27 → 6.1.14 Major PR

Closed over 1 year ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 5.3.19 to 6.1.14

testingisdocumenting/webtau #1623

5.3.19 → 6.1.14 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /target/m2e-wtp/web-resources/META-INF/maven/ru.vallball/bank01

vall-ball/bank01 #32

5.3.18 → 6.1.14 Major PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /target/m2e-wtp/web-resources/META-INF/maven/ru.vallball/forum02

vall-ball/forum02 #28

5.3.18 → 6.1.14 Major PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14

vall-ball/kino01 #36

5.3.18 → 6.1.14 Major PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /target/m2e-wtp/web-resources/META-INF/maven/ru.vallball/biblio01

vall-ball/biblio01 #36

5.3.18 → 6.1.14 Major PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 5.2.0.RELEASE to 5.2.3.RELEASE in /spring-boot/spring-aop-services/spring-aop-service

rslakra/Samples #29

5.2.0.RELEASE → 5.2.3.RELEASE Patch PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 4.3.4.RELEASE to 4.3.5.RELEASE in /jsf

guillermolam/tutorials #17

4.3.4.RELEASE → 4.3.5.RELEASE Patch PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 3.2.4.RELEASE to 3.2.18.RELEASE

OhoudAlawad/Demo-WebGoat #6

3.2.4.RELEASE → 3.2.18.RELEASE Patch PR

Closed over 1 year ago 2 comments

Bump org.springframework:spring-webmvc from 6.1.13 to 6.2.1

nimalank7/Udemy-Spring-CRUD #124

6.1.13 → 6.2.1 Minor PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 5.3.39 to 6.1.13

EsupPortail/esup-sgc #39

5.3.39 → 6.1.13 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.15 to 6.1.13

virtual-imaging-platform/VIP-portal #488

5.3.15 → 6.1.13 Major PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 6.0.18 to 6.1.13

jumarko/poptavka #62

6.0.18 → 6.1.13 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.37 to 6.1.13 in /geoportal-application/geoportal-harvester-war

Esri/geoportal-server-harvester #230

5.3.37 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.26 to 6.1.13

DIGI-UW/OpenELIS-Global-2 #1263

5.3.26 → 6.1.13 Major PR

Closed almost 2 years ago 2 comments

Bump org.springframework:spring-webmvc from 5.3.19 to 6.1.13

Justdwiwt/Refactor #22

5.3.19 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.13 in /commons-ref

xunyss/commons #10

5.3.18 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.13

thiagovp/teaching-academy #8

5.3.18 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.13 in /target/m2e-wtp/web-resources/META-INF/maven/Demo/Demo

tattrung15/SpringMVC #3

5.3.18 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.13

limingzhong61/ssm-crud #15

5.3.18 → 6.1.13 Major PR

Merged almost 2 years ago

Bump org.springframework:spring-webmvc from 5.3.10 to 6.1.13 in /movie-client

algorythmist/movie-night #17

5.3.10 → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.2.3.RELEASE to 6.1.13 in /LogiWebRoads

BrSeal/JavaSchoolStudy #52

5.2.3.RELEASE → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.2.22.RELEASE to 6.1.13 in /indianTrader

birlax/web-app-dev #62

5.2.22.RELEASE → 6.1.13 Major PR

Merged almost 2 years ago

Bump org.springframework:spring-webmvc from 5.1.8.RELEASE to 6.1.13

Joeri-Abbo/java-SpringMvcSimpleApp #1

5.1.8.RELEASE → 6.1.13 Major PR

Open almost 2 years ago 8 comments

Bump org.springframework:spring-webmvc from 5.0.6.RELEASE to 6.1.13 in /spring-crm-rest-security/target/m2e-wtp/web-resources/META-INF/maven/com.luv2code.springdemo/spring-crm-rest-security-solution

kaleliguray/spring-crm-rest-security-example #32

5.0.6.RELEASE → 6.1.13 Major PR

Merged almost 2 years ago

Bump org.springframework:spring-webmvc from 4.3.7.RELEASE to 6.1.13

maliangnansheng/bbs-ssm #22

4.3.7.RELEASE → 6.1.13 Major PR

Closed almost 2 years ago

chore(deps): bump org.springframework:spring-webmvc from 4.3.30.RELEASE to 6.1.13

uPortal-Project/WebproxyPortlet #227

4.3.30.RELEASE → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 4.0.5.RELEASE to 6.1.13 in /samples/Maven POM/filenames

Rose2161/linguist #74

4.0.5.RELEASE → 6.1.13 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 6.1.6 to 6.1.13

cariochi/recordo #47

6.1.6 → 6.1.13 Patch PR

Closed almost 2 years ago

Bump org.springframework:spring-webmvc from 6.0.19 to 6.1.13 in /src/backend/libs/efiling-bom

bcgov/jag-file-submission #2827

6.0.19 → 6.1.13 Minor PR

Closed almost 2 years ago 5 comments

Bump org.springframework:spring-webmvc from 5.3.7 to 5.3.18 in /sa-token-demo/sa-token-demo-ssm

dromara/Sa-Token #610

5.3.7 → 5.3.18 Patch PR

Closed about 2 years ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 6.0.2 to 6.0.14 in /sentinel-adapter/sentinel-spring-webmvc-v6x-adapter

alibaba/Sentinel #3352

6.0.2 → 6.0.14 Patch PR

Closed over 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 6.0.8 to 6.0.14 in /HelloWorld/target/m2e-wtp/web-resources/META-INF/maven/Treinamento/HelloWorld

geanCarneiro/TreinamentoJavaVixTeam #17

6.0.8 → 6.0.14 Patch PR

Closed over 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.2.10.RELEASE to 5.2.20.RELEASE in /SpringWebRest

dharm117x/Interview #7

5.2.10.RELEASE → 5.2.20.RELEASE Patch PR

Closed over 2 years ago

Bump org.springframework:spring-webmvc from 2.5.6.SEC03 to 5.2.20.RELEASE in /bom

sumonst21/jenkins #4

2.5.6.SEC03 → 5.2.20.RELEASE Major PR

Closed over 2 years ago 1 comment

Bump org.springframework:spring-webmvc from 5.1.2.RELEASE to 5.2.20.RELEASE in /target/m2e-wtp/web-resources/META-INF/maven/com.alhl/hz

kwackjiyong/AllLookHoneyLook #31

5.1.2.RELEASE → 5.2.20.RELEASE Minor PR

Closed almost 3 years ago 1 comment

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 245 (47.4%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 194 (37.5%)

Minor 30 (5.8%)

Patch 264 (51.1%)