`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
516 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
291 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Path traversal vulnerability in functional web frameworks

GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published almost 2 years ago • updated 1 day ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Improper Neutralization of Input During Web Page Generation in Spring Framework

GHSA-ff7p-jqjm-v66h CVE-2014-1904 MODERATE published about 4 years ago • updated about 1 month ago

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 befor...

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources

GHSA-6p4f-wcwh-5vvm CVE-2026-22745 MODERATE published about 2 months ago • updated 4 days ago

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application c...

Spring Framework Path Traversal vulnerability

GHSA-g5vr-rgqm-vf78 CVE-2024-38819 HIGH published over 1 year ago • updated 4 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Spring Framework MVC Applications Path Traversal Vulnerability

GHSA-r936-gwx5-v52f CVE-2025-41242 MODERATE published 10 months ago • updated 13 days ago

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An app...

View all 17 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

Bump the maven group across 29 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #7

5.0.3.RELEASE → 6.2.18 Major PR

Closed about 1 month ago 1 comment

Bump the maven group across 23 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #6

5.0.3.RELEASE → 6.2.18 Major PR

Closed about 1 month ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.39 to 6.2.10

tbadura/jokes #19

5.3.39 → 6.2.10 Major PR

Closed 3 months ago 2 comments

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 7.0.4

mjeanroy/junit-servers #969

5.3.31 → 7.0.4 Major PR

Closed 4 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 7.0.3

iluwatar/java-design-patterns #3432

6.2.5 → 7.0.3 Major PR

Open 4 months ago 1 comment

Bump the maven group across 2 directories with 6 updates

GlacierEQ/nem #1

4.3.30.RELEASE → 6.1.20 Major PR

Open 5 months ago 4 comments

chore: [DevOps] bump the production-major group across 1 directory with 9 updates

SAP/ai-sdk-java #701

6.2.12 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 63 updates

craftercms/craftercms #8480

6.2.15 → 7.0.2 Major PR

Closed 6 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8479

6.2.15 → 7.0.2 Major PR

Open 6 months ago 4 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8478

6.2.15 → 7.0.2 Major PR

Open 6 months ago 7 comments

Bump the all-maven-deps group across 3 directories with 122 updates

QuocKhanh2002/craftercms #13

6.2.10 → 7.0.2 Major PR

Closed 6 months ago 1 comment

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 7.0.2

mjeanroy/springmvc-mustache #1014

5.3.31 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 109 updates

craftercms/craftercms #8442

6.2.12 → 7.0.0 Major PR

Closed 7 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.23 to 6.2.10

kenu/okdevtv #107

5.3.23 → 6.2.10 Major PR

Open 8 months ago 2 comments

Bump the maven group across 3 directories with 18 updates

lefty1808/my-program-learning #2

4.3.3.RELEASE → 6.2.10 Major PR

Closed 8 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.19 to 6.2.10

gauravbrills/springtdd #29

5.3.19 → 6.2.10 Major PR

Open 8 months ago

Bump org.springframework:spring-webmvc from 5.3.36 to 6.2.10

marcomarasca/Synapse-Repository-Services #42

5.3.36 → 6.2.10 Major PR

Open 8 months ago

Bump the maven group across 0 directory with 1 update

entando/app-engine #311

5.3.39 → 6.1.21 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10

bamit1/parking_system #14

5.3.18 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.21 to 6.2.10

tzttao/hospital_system #22

5.3.21 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.19 to 6.2.10 in /SpMVC_ShopV3

callor/Biz-Spring-505-2020-07 #213

5.3.19 → 6.2.10 Major PR

Open 9 months ago

build(deps): Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /sentinel-adapter/sentinel-spring-webmvc-adapter

guravvaishnavi02/Sentinel #7

5.3.18 → 6.2.10 Major PR

Open 9 months ago

build(deps): bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /Tomcat-Maven-Spring-Java-Ubuntu/SpringTest

kukaro/Eris-DockerExampleTemplate #101

5.3.18 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /java-checks-test-sources/default

SonarSource/sonar-java #5300

5.3.18 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /cursos-alura/Java/formacao-java/Banco-dados/Java e JPA/parte 2/projeto-jpa-2

jairosousa/cursos-alura #131

5.3.18 → 6.2.10 Major PR

Merged 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /code/spring-security-parent/spring-security-session

luocong2013/study #93

5.3.18 → 6.2.10 Major PR

Open 9 months ago

build(deps): Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /sentinel-transport/sentinel-transport-spring-mvc

alibaba/Sentinel #3558

5.3.18 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /spring-security-demo-05-logout

kisinad/spring-security-basic #42

5.3.18 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.31 to 6.2.10 in /web-spring

Draagon/draagon-metaobjects #17

5.3.31 → 6.2.10 Major PR

Closed 9 months ago

Bump org.springframework:spring-webmvc from 5.0.7.RELEASE to 6.2.10 in /AGIFWeb

abes-esr/formations-bifor #2

5.0.7.RELEASE → 6.2.10 Major PR

Closed 9 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /spring-security-demo-02-basic-security

kisinad/spring-security-basic #41

5.3.18 → 6.2.10 Major PR

Merged 9 months ago

Bump org.springframework:spring-webmvc from 5.3.31 to 6.2.10 in /demo

Draagon/draagon-metaobjects #11

5.3.31 → 6.2.10 Major PR

Closed 9 months ago 1 comment

Bump the maven group across 2 directories with 2 updates

offsoc/pay-java-parent #2

4.3.4.RELEASE → 6.2.10 Major PR

Open 9 months ago

chore(deps): bump org.springframework:spring-webmvc from 5.3.31 to 6.2.11

mjeanroy/junit-servers #887

5.3.31 → 6.2.11 Major PR

Open 9 months ago

chore(deps): bump org.springframework:spring-webmvc from 5.3.32 to 6.2.10 in /streampipes-data-explorer-export

apache/streampipes #3775

5.3.32 → 6.2.10 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 5.3.39 to 6.2.10 in /deploy

NemProject/nem #710

5.3.39 → 6.2.10 Major PR

Closed 9 months ago

Bump org.springframework:spring-webmvc from 5.2.3.RELEASE to 6.2.10

green-code-initiative/creedengo-java #139

5.2.3.RELEASE → 6.2.10 Major PR

Closed 9 months ago

Bump org.springframework:spring-webmvc from 5.3.39 to 6.2.10

sniffy/sniffy #579

5.3.39 → 6.2.10 Major PR

Open 9 months ago

Bump the maven group across 2 directories with 15 updates

se2026/ORCID-Source #1

5.3.20 → 6.2.10 Major PR

Merged 9 months ago

Bump the maven group across 2 directories with 7 updates

duckhee/spring #1

4.3.3.RELEASE → 5.3.39-atlassian-4 Major PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 4.3.12.RELEASE to 6.2.10 in /agent/agent-plugins/spring/webmvc

FrankChen021/bithon #1098

4.3.12.RELEASE → 6.2.10 Major PR

Open 10 months ago

build(deps): Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /sentinel-adapter/sentinel-spring-webmvc-adapter

alibaba/Sentinel #3550

5.3.18 → 6.2.10 Major PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10

thiagovp/teaching-academy #9

5.3.18 → 6.2.10 Major PR

Merged 10 months ago

build(deps): bump org.springframework:spring-webmvc from 5.3.39 to 6.2.10 in /bom

albfernandez/jboss-seam #243

5.3.39 → 6.2.10 Major PR

Closed 10 months ago 1 comment

Bump org.springframework:spring-webmvc from 5.3.19 to 6.2.10 in /Project/target/m2e-wtp/web-resources/META-INF/maven/com.pjt/edu

Mishuni/Multi_Food #12

5.3.19 → 6.2.10 Major PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 5.3.9 to 6.2.10

qbankdemo/bad-java-code #4

5.3.9 → 6.2.10 Major PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 5.3.31 to 6.2.10 in /default/generated/spring-framework/tests/data/security

Azure/appcat-konveyor-rulesets #159

5.3.31 → 6.2.10 Major PR

Open 10 months ago 1 comment

Bump the maven group across 1 directory with 8 updates

PeezoslugOG/codeql #8

5.3.18 → 6.2.10 Major PR

Open 10 months ago

SONARJAVA-5746 Bump org.springframework:spring-webmvc from 5.3.18 to 6.2.10 in /its/plugin/projects/java-tutorial

SonarSource/sonar-java #5289

5.3.18 → 6.2.10 Major PR

Open 10 months ago 3 comments

Bump org.springframework:spring-webmvc from 5.3.22 to 6.2.10 in /springwebmvc

kman9787/project-template #102

5.3.22 → 6.2.10 Major PR

Open 10 months ago

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 244 (47.3%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 193 (37.4%)

Minor 30 (5.8%)

Patch 264 (51.2%)