`org.springframework:spring-webmvc`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-webmvc

Total PRs:
516 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
291 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Path traversal vulnerability in functional web frameworks

GHSA-cx7f-g6mp-7hqm CVE-2024-38816 HIGH published almost 2 years ago • updated 1 day ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Improper Neutralization of Input During Web Page Generation in Spring Framework

GHSA-ff7p-jqjm-v66h CVE-2014-1904 MODERATE published about 4 years ago • updated about 1 month ago

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 befor...

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources

GHSA-6p4f-wcwh-5vvm CVE-2026-22745 MODERATE published about 2 months ago • updated 4 days ago

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application c...

Spring Framework Path Traversal vulnerability

GHSA-g5vr-rgqm-vf78 CVE-2024-38819 HIGH published over 1 year ago • updated 4 days ago

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An at...

Spring Framework MVC Applications Path Traversal Vulnerability

GHSA-r936-gwx5-v52f CVE-2025-41242 MODERATE published 10 months ago • updated 13 days ago

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An app...

View all 17 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump org.springframework:spring-webmvc from 6.2.17 to 6.2.18

NASA-PDS/registry-api #766

6.2.17 → 6.2.18 Patch PR

Open about 1 month ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.5 to 6.2.18 in /page-controller

iluwatar/java-design-patterns #3476

6.2.5 → 6.2.18 Patch PR

Open about 1 month ago 2 comments

Bump org.springframework:spring-webmvc from 6.2.11 to 6.2.18 in /Foundation/org.egovframe.rte.fdl.access

eGovFramework/egovframe-runtime #220

6.2.11 → 6.2.18 Patch PR

Closed about 1 month ago 1 comment

Bump the maven group across 19 directories with 9 updates

dhay3/spring #3

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR

Closed about 1 month ago 1 comment

Bump org.springframework:spring-webmvc from 7.0.6 to 7.0.7

a-anand-91119/Yellow-Pages #174

7.0.6 → 7.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the maven group across 5 directories with 4 updates

Alfresco/alfresco-community-repo #3990

7.0.2 → 7.0.6 Patch PR

Closed 2 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.15 to 6.2.17

skjolber/mockito-rest-spring #65

6.2.15 → 6.2.17 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.10 to 6.2.17

mvmaniac/basic-spring4 #13

6.2.10 → 6.2.17 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the maven group across 2 directories with 2 updates

CMSgov/qpp-conversion-tool #1620

6.2.12 → 6.2.17 Patch PR

Open 3 months ago 1 comment

Bump the maven group across 20 directories with 3 updates

preechapon250/azure-sdk-for-java #7

7.0.2 → 7.0.6 Patch PR

Closed 3 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.5 to 7.0.6

smallrye/smallrye-open-api #2510

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-webmvc from 7.0.4 to 7.0.5

a-anand-91119/Yellow-Pages #164

7.0.4 → 7.0.5 Patch PR

Open 4 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.4 to 7.0.5

smallrye/smallrye-open-api #2487

7.0.4 → 7.0.5 Patch PR

Closed 4 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 46 updates

craftercms/craftercms #8551

7.0.3 → 7.0.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump org.springframework:spring-webmvc from 7.0.3 to 7.0.4

IodeSystems/typescript-generator #27

7.0.3 → 7.0.4 Patch PR

Closed 4 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.3 to 7.0.4

smallrye/smallrye-open-api #2482

7.0.3 → 7.0.4 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-webmvc from 7.0.2 to 7.0.3

a-anand-91119/Yellow-Pages #154

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.2 to 7.0.3

smallrye/smallrye-open-api #2452

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 3 comments

Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.1 to 7.0.2

smallrye/smallrye-open-api #2436

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 1 comment

build(deps): bump the spring group across 1 directory with 13 updates

DSpace/DSpace #11620

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the spring group with 12 updates

DSpace/DSpace #11583

6.2.12 → 6.2.13 Patch PR

Closed 7 months ago 1 comment

build(deps): Bump org.springframework:spring-webmvc from 7.0.0 to 7.0.1

smallrye/smallrye-open-api #2420

7.0.0 → 7.0.1 Patch PR

Open 7 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.12 to 6.2.13

JKatzwinkel/tla-es #502

6.2.12 → 6.2.13 Patch PR

Open 7 months ago 3 comments

build(deps): bump the spring group across 2 directories with 2 updates

nicollas1020/serverless_java #9

6.2.8 → 6.2.12 Patch PR

Open 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.2.10 → 6.2.12 Patch PR

Closed 8 months ago 1 comment

chore(deps): bump the spring group across 3 directories with 6 updates

aws/serverless-java-container #1569

6.2.8 → 6.2.12 Patch PR

Open 8 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.10 to 6.2.12

lbkulinski/cta4j-back-end #113

6.2.10 → 6.2.12 Patch PR

Open 8 months ago

Bump org.springframework:spring-webmvc from 6.2.11 to 6.2.12

a-anand-91119/Yellow-Pages #137

6.2.11 → 6.2.12 Patch PR

Merged 8 months ago 1 comment

Bump org.springframework:spring-webmvc from 6.2.1 to 6.2.12

Ludy87/test_java #359

6.2.1 → 6.2.12 Patch PR

Open 8 months ago 1 comment

build(deps): bump org.springframework:spring-webmvc from 6.2.11 to 6.2.12

JKatzwinkel/tla-es #494

6.2.11 → 6.2.12 Patch PR

Merged 8 months ago

deps(deps): bump the minor-and-patch group across 1 directory with 28 updates

Work-m8/ag-ui-4j #55

6.2.9 → 6.2.11 Patch PR

Open 8 months ago 5 comments

build(deps): bump org.springframework:spring-webmvc from 6.2.9 to 6.2.11 in /ableron-spring-boot-3

ableron/ableron #254

6.2.9 → 6.2.11 Patch PR

Merged 9 months ago

Bump the spring group with 28 updates

DSpace/DSpace #11391

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump the spring group with 25 updates

DSpace/DSpace #11373

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago

Bump the spring group with 28 updates

DSpace/DSpace #11365

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 3 directories with 87 updates

QuocKhanh2002/craftercms #2

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 3 directories with 78 updates

QuocKhanh2002/craftercms #1

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 6.2.8 to 6.2.10

trizist/DSpace #5

6.2.8 → 6.2.10 Patch PR

Open 9 months ago

deps(deps): bump the minor-and-patch group across 1 directory with 24 updates

Work-m8/ag-ui-4j #46

6.2.9 → 6.2.11 Patch PR

Closed 9 months ago 4 comments

Bump the spring group with 4 updates

malczuuu/problem4j-spring-web #8

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the spring group with 4 updates

malczuuu/problem4j-spring-web #7

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 2 directories with 46 updates

craftercms/craftercms #8353

6.2.10 → 6.2.11 Patch PR

Merged 9 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 21 updates

Work-m8/ag-ui-4j #45

6.2.9 → 6.2.11 Patch PR

Closed 9 months ago 2 comments

Bump org.springframework:spring-webmvc from 6.2.9 to 6.2.11

Joeri-Abbo/java-SpringMvcSimpleApp #7

6.2.9 → 6.2.11 Patch PR

Open 9 months ago

Bump org.springframework:spring-webmvc from 6.2.3 to 6.2.11

nboucaud/PDF-Suite #62

6.2.3 → 6.2.11 Patch PR

Closed 9 months ago 1 comment

chore: [DevOps] bump the production-minor-patch group with 9 updates

SAP/ai-sdk-java #581

6.2.10 → 6.2.11 Patch PR

Open 9 months ago

Bump the maven group across 16 directories with 8 updates

dhay3/spring #1

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR

Open 9 months ago

Package Details

Name:	`org.springframework:spring-webmvc`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-webmvc`
JSON API:	View JSON

Security Advisories

17

Active advisories

CRITICAL 1

HIGH 6

MODERATE 8

LOW 2

View All maven Advisories

Package Information

Description:

Spring Web MVC

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	227,195
Dependent Packages:	4,621
Ranking:	Top 0.003% by dependent repos Top 0.0156% by dependent pkgs

PR Status

Open 244 (47.3%)

Merged 105 (20.3%)

Closed 138 (26.7%)

PR Types

Major 193 (37.4%)

Minor 30 (5.8%)

Patch 264 (51.2%)