`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
516 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
291 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Path traversal vulnerability in functional web frameworks

GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published almost 2 years ago • updated 2 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Improper Neutralization of Input During Web Page Generation in Spring Framework

GHSA-ff7p-jqjm-v66h CVE-2014-1904 MODERATE published about 4 years ago • updated about 1 month ago

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 befor...

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources

GHSA-6p4f-wcwh-5vvm CVE-2026-22745 MODERATE published about 2 months ago • updated 4 days ago

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application c...

Spring Framework Path Traversal vulnerability

GHSA-g5vr-rgqm-vf78 CVE-2024-38819 HIGH published over 1 year ago • updated 4 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Spring Framework MVC Applications Path Traversal Vulnerability

GHSA-r936-gwx5-v52f CVE-2025-41242 MODERATE published 10 months ago • updated 13 days ago

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An app...

View all 17 advisories

Recent PRs (filtered by: Minor PRs )

RSS Feed Clear filter

Bump the maven group across 2 directories with 2 updates

StevenKitavi/demoapp-freestyle #23

6.1.20 → 6.2.17 Minor PR

Closed 2 months ago 1 comment

Bump the maven group across 1 directory with 2 updates

dwaned/max-profit-calculator #87

6.1.16 → 6.2.10 Minor PR

Open 5 months ago 5 comments

fix: bump org.springframework:spring-webmvc from 6.1.14 to 6.2.11

lsd-consulting/lsd-interceptors #400

6.1.14 → 6.2.11 Minor PR

Open 8 months ago 12 comments

Bump org.springframework:spring-webmvc from 6.0.12 to 6.2.10

cessda/cessda.fair.tests #1

6.0.12 → 6.2.10 Minor PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 6.1.4 to 6.2.11

Vipin-Sharma/MSG #93

6.1.4 → 6.2.11 Minor PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 6.1.4 to 6.2.10

Vipin-Sharma/MSG #90

6.1.4 → 6.2.10 Minor PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 6.0.13 to 6.2.10

jeecgboot/autopoi #167

6.0.13 → 6.2.10 Minor PR

Open 9 months ago

Bump the maven group across 2 directories with 7 updates

Alvin80Bcn/ORCID-Source #2

6.1.14 → 6.2.10 Minor PR

Open 9 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.1.6 to 6.2.10 in /SpringWebTest

dharm117x/Interview #11

6.1.6 → 6.2.10 Minor PR

Closed 9 months ago

chore(deps)(deps): bump org.springframework:spring-webmvc from 6.0.11 to 6.2.10

Lucasantunesribeiro/Sistema_de_Gestao_de_Pedidos_Distribu-do_com_Event_Sourcing #43

6.0.11 → 6.2.10 Minor PR

Closed 9 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.1.13 to 6.2.10 in /ebs-spring-hibernate

get2mandar/javabeginner #22

6.1.13 → 6.2.10 Minor PR

Open 10 months ago

build(deps): bump org.springframework:spring-webmvc from 6.1.13 to 6.2.10 in /Topics/Spring/Spring-MVC/AddMarks

2KAbhishek/Wipro-PJP #283

6.1.13 → 6.2.10 Minor PR

Merged 10 months ago

build(deps): bump org.springframework:spring-webmvc from 6.1.13 to 6.2.10 in /Topics/Spring/SpringMVC-With-Hibernate/StudentIn

2KAbhishek/Wipro-PJP #279

6.1.13 → 6.2.10 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.2.10

javatlacati/MISED #103

6.0.0 → 6.2.10 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 6.1.13 to 6.2.10 in /java-checks-test-sources/spring-3.2

SonarSource/sonar-java #5290

6.1.13 → 6.2.10 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 6.1.13 to 6.2.10 in /home/rssfiz.show

rodakw/rssfiz #17

6.1.13 → 6.2.10 Minor PR

Merged 10 months ago

Bump org.springframework:spring-webmvc from 6.0.11 to 6.2.10

aye-min-soe/proton #6

6.0.11 → 6.2.10 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /TEST-ELASTIC

namerajendrasingh/TEST-ELSTIC #9

6.0.0 → 6.1.14 Minor PR

Open 10 months ago

Bump the gradle group across 1 directory with 3 updates

github/flit #20

6.0.11 → 6.1.14 Minor PR

Open 10 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /spring-client

jmagit/SUM20250721 #2

6.0.0 → 6.1.14 Minor PR

Open 11 months ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14 in /spring-client/target/m2e-wtp/web-resources/META-INF/maven/com.laboratorio/spring-client

jmagit/SUM20250721 #1

6.0.0 → 6.1.14 Minor PR

Closed 11 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.0.11 to 6.1.14

mnedkov/ExchangeRates #15

6.0.11 → 6.1.14 Minor PR

Open about 1 year ago

Bump org.springframework:spring-webmvc from 6.0.8 to 6.1.14 in /maven-parent

anqingyu/workspace_idea_03 #71

6.0.8 → 6.1.14 Minor PR

Open about 1 year ago

Bump the spring group across 1 directory with 21 updates

Netcracker/qubership-core-rest-libraries #20

6.1.13 → 6.2.7 Minor PR

Closed about 1 year ago

Bump org.springframework:spring-webmvc from 6.0.0 to 6.1.14

javatlacati/MISED #93

6.0.0 → 6.1.14 Minor PR

Closed about 1 year ago 1 comment

fix: bump the other-dependencies group across 1 directory with 14 updates

lsd-consulting/lsd-interceptors #371

6.1.14 → 6.2.5 Minor PR

Open about 1 year ago 24 comments

Bump org.springframework:spring-webmvc from 6.1.13 to 6.2.1

nimalank7/Udemy-Spring-CRUD #124

6.1.13 → 6.2.1 Minor PR

Merged over 1 year ago

Bump org.springframework:spring-webmvc from 6.0.18 to 6.1.13

jumarko/poptavka #62

6.0.18 → 6.1.13 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework:spring-webmvc from 6.0.19 to 6.1.13 in /src/backend/libs/efiling-bom

bcgov/jag-file-submission #2827

6.0.19 → 6.1.13 Minor PR

Closed almost 2 years ago 5 comments

Bump org.springframework:spring-webmvc from 5.1.2.RELEASE to 5.2.20.RELEASE in /target/m2e-wtp/web-resources/META-INF/maven/com.alhl/hz

kwackjiyong/AllLookHoneyLook #31

5.1.2.RELEASE → 5.2.20.RELEASE Minor PR

Closed almost 3 years ago 1 comment

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 244 (47.3%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 193 (37.4%)

Minor 30 (5.8%)

Patch 264 (51.2%)