`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
517 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
292 repositories

Unique Repos (30 days):
1 repository

Security Advisories

RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application

GHSA-8wx2-9q48-vm9r CVE-2020-5398 HIGH published over 6 years ago • updated about 1 hour ago

In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerabl...

Spring MVC and WebFlux has Server Sent Event stream corruption

GHSA-6hcq-hmm3-jj3c CVE-2026-22735 LOW published 3 months ago • updated 13 minutes ago

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: ...

View all 17 advisories

Recent PRs

RSS Feed

Bump the gradle group across 1 directory with 3 updates

github/flit #22

6.2.8 → 6.2.9 Patch PR

Closed 10 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /TEST-ELASTIC

namerajendrasingh/TEST-ELSTIC #9

6.0.0 → 6.1.14 Minor PR

Open 10 months ago

Bump the gradle group across 1 directory with 3 updates

github/flit #20

6.0.11 → 6.1.14 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 5.3.37 to 6.1.14 in /geoportal-application/geoportal-harvester-war

Esri/geoportal-server-harvester #248

5.3.37 → 6.1.14 Major PR

Open 11 months ago

Bump the all-maven-deps group across 3 directories with 62 updates

craftercms/craftercms #8310

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

build(deps): Bump org.springframework:spring-webmvc from 6.2.8 to 6.2.9

taraskovaliv/bom #314

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 5.3.21 to 6.1.14

tzttao/hospital_system #21

5.3.21 → 6.1.14 Major PR

Closed 11 months ago

Bump org.springframework:spring-webmvc from 3.2.4.RELEASE to 6.1.14 in the maven group across 1 directory

DanteArcanaelMontford/WebGoat2 #6

3.2.4.RELEASE → 6.1.14 Major PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 5.3.33 to 6.1.14 in /samples/Maven POM/filenames

Rose2161/linguist #100

5.3.33 → 6.1.14 Major PR

Open 11 months ago

build(deps): bump org.springframework:spring-webmvc from 6.2.8 to 6.2.9 in /ableron-spring-boot-3

ableron/ableron #218

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 6.1.13 to 6.1.14 in /spring-crm-rest-security/target/m2e-wtp/web-resources/META-INF/maven/com.luv2code.springdemo/spring-crm-rest-security-solution

kaleliguray/spring-crm-rest-security-example #35

6.1.13 → 6.1.14 Patch PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14

WuShuaiNan/wusn-ui #2

5.3.18 → 6.1.14 Major PR

Closed 11 months ago

Bump org.springframework:spring-webmvc from 5.0.2.RELEASE to 6.1.14

onXtiTaniuM/InterPLFSMF23 #7

5.0.2.RELEASE → 6.1.14 Major PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 4.1.6.RELEASE to 6.1.14 in /dsws/Eclipse/.metadata/.plugins/org.eclipse.wst.server.core/tmp0/wtpwebapps/dsws/META-INF/maven/dsws/dsws

cefet-rj-dal/simevolution #9

4.1.6.RELEASE → 6.1.14 Major PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 4.1.6.RELEASE to 6.1.14 in /dsws/Eclipse/dsws

cefet-rj-dal/simevolution #8

4.1.6.RELEASE → 6.1.14 Major PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 4.1.6.RELEASE to 6.1.14 in /dsws/Eclipse/dsws/target/m2e-wtp/web-resources/META-INF/maven/dsws/dsws

cefet-rj-dal/simevolution #7

4.1.6.RELEASE → 6.1.14 Major PR

Merged 11 months ago

Bump the maven group with 4 updates

MissionOpen/BenchmarkJava #3

5.3.39 → 6.1.20 Major PR

Open 11 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.6 to 6.2.9

niteshsaini02/PDF-Editor #33

6.2.6 → 6.2.9 Patch PR

Closed 11 months ago 1 comment

Bump the all-maven-deps group across 2 directories with 62 updates

craftercms/craftercms #8291

6.2.8 → 6.2.9 Patch PR

Open 11 months ago

Bump the spring group across 1 directory with 25 updates

DSpace/DSpace #11095

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11093

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the spring group across 1 directory with 28 updates

DSpace/DSpace #11086

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

chore: [DevOps] bump the production-minor-patch group with 14 updates

SAP/ai-sdk-java #516

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump the maven group across 2 directories with 15 updates

fg2310/ORCID-Source #1

5.3.20 → 6.1.14 Major PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 5.1.8.RELEASE to 6.2.9

Joeri-Abbo/java-SpringMvcSimpleApp #5

5.1.8.RELEASE → 6.2.9 Major PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /Eclipse/amews/target/m2e-wtp/web-resources/META-INF/maven/dsws/dsws

cefet-rj-dal/hanafuda #23

5.3.18 → 6.1.14 Major PR

Merged 11 months ago

Bump the all-maven-deps group across 2 directories with 61 updates

craftercms/craftercms #8290

6.2.8 → 6.2.9 Patch PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /spring-client

jmagit/SUM20250721 #2

6.0.0 → 6.1.14 Minor PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /spring-client/target/m2e-wtp/web-resources/META-INF/maven/com.laboratorio/spring-client

jmagit/SUM20250721 #1

6.0.0 → 6.1.14 Minor PR

Closed 11 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /Eclipse/.metadata/.plugins/org.eclipse.wst.server.core/tmp0/wtpwebapps/amews/META-INF/maven/dsws/dsws

cefet-rj-dal/hanafuda #22

5.3.18 → 6.1.14 Major PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /Eclipse/.metadata/.plugins/org.eclipse.wst.server.core/tmp1/wtpwebapps/amews/META-INF/maven/dsws/dsws

cefet-rj-dal/hanafuda #21

5.3.18 → 6.1.14 Major PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 6.2.6 to 6.2.9

nileshchakraborty/ksco-pdf #33

6.2.6 → 6.2.9 Patch PR

Closed 11 months ago 1 comment

Bump the spring group with 12 updates

DSpace/DSpace #11054

6.2.8 → 6.2.9 Patch PR

Open 11 months ago 1 comment

Bump the spring group with 12 updates

DSpace/DSpace #11052

6.2.8 → 6.2.9 Patch PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 6.2.3 to 6.2.9

nboucaud/PDF-Suite #46

6.2.3 → 6.2.9 Patch PR

Closed 11 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /InterviewWorkspace/policy-client-rest

aabraha/RestFullService #47

5.3.18 → 6.1.14 Major PR

Open 11 months ago

Bump the maven-dependencies group with 6 updates

danielmroczka/mongodb-librarian #8

6.2.8 → 6.2.9 Patch PR

Open 11 months ago 1 comment

Bump the maven group across 1 directory with 6 updates

XDMtM69/linguist #10

4.3.20.RELEASE → 5.2.22.RELEASE Major PR

Open 11 months ago

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 6.2.9

mjeanroy/springmvc-mustache #924

5.3.31 → 6.2.9 Major PR

Closed 11 months ago

Bump org.springframework:spring-webmvc from 6.2.6 to 6.2.9

usnistgov/swid-tools #95

6.2.6 → 6.2.9 Patch PR

Closed 11 months ago 1 comment

Bump the spring group with 7 updates

ianrobrien/fakebank #707

6.2.8 → 6.2.9 Patch PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 6.2.8 to 6.2.9

codeforamerica/form-flow-starter-app #410

6.2.8 → 6.2.9 Patch PR

Open 11 months ago

build(deps): bump org.springframework:spring-webmvc from 6.2.8 to 6.2.9

JKatzwinkel/tla-es #465

6.2.8 → 6.2.9 Patch PR

Merged 11 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.1.14 in /book-shop/target/m2e-wtp/web-resources/META-INF/maven/com.ty/book-shop

Rajeshwaran7/spring-mvc-book-shop #3

5.3.18 → 6.1.14 Major PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 5.3.39 to 6.1.14

intersoftdatalabs-in/percussioncms #9

5.3.39 → 6.1.14 Major PR

Merged 11 months ago

Bump the maven group across 2 directories with 3 updates

eryanwcp/ec #15

5.3.39 → 6.1.14 Major PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 2.5.6 to 6.1.14 in /applications/vpro-wizards

mmbase/mmbase #19

2.5.6 → 6.1.14 Major PR

Open 12 months ago

Bump org.springframework:spring-webmvc from 5.3.39 to 6.1.14 in /design-and-architecture/java-modernization/java8-app

aws-samples/sample-ai-powered-sdlc-patterns-with-aws #20

5.3.39 → 6.1.14 Major PR

Open 12 months ago

Bump org.springframework:spring-webmvc from 5.3.10 to 6.1.14 in /movie-client

algorythmist/movie-night #18

5.3.10 → 6.1.14 Major PR

Open 12 months ago

Bump the maven group across 3 directories with 7 updates

danielmroczka/mongodb-librarian #6

3.2.5.RELEASE → 4.3.20.RELEASE Major PR

Closed 12 months ago 1 comment

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 245 (47.4%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 194 (37.5%)

Minor 30 (5.8%)

Patch 264 (51.1%)

org.springframework:spring-webmvc

Security Advisories

Path traversal vulnerability in functional web frameworks

Improper Neutralization of Input During Web Page Generation in Spring Framework

Remote Code Execution in Spring Framework

RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application

Spring MVC and WebFlux has Server Sent Event stream corruption

Recent PRs

Package Details

Security Advisories

17

Package Information

PR Status

PR Types

`org.springframework:spring-webmvc`