org.springframework:[email protected] has vulnerabilities — update to latest
Update to >= 2.5.7.SR023 to fix known vulnerabilities
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| high | CVE-2018-1272 | Possible privilege escalation in org.springframework:spring-core | 5.0.5 |
| medium | CVE-2015-0201 | Moderate severity vulnerability that affects org.springframework:spring-core | 4.1.5 |
| low | CVE-2026-41848 | Spring Framework Denial of Service via AntPathMatcher | 6.2.19 |
| medium | CVE-2021-22060 | Log entry injection in Spring Framework | 5.2.19 |
| high | CVE-2016-5007 | Spring Security and Spring Framework may not recognize certain paths that should be protected | 4.1.1 |
| high | CVE-2018-1258 | Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass | 5.0.6.RELEASE |
| medium | CVE-2018-11040 | Moderate severity vulnerability that affects org.springframework:spring-core | 4.3.18.RELEASE |
| medium | CVE-2011-2894 | Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data | 2.0.7 |
| high | CVE-2018-15756 | Denial of Service in Spring Framework | 4.3.20.RELEASE |
| medium | CVE-2018-1271 | Path Traversal in org.springframework:spring-core | 4.3.15 |
| high | CVE-2025-41249 | Spring Framework annotation detection mechanism may result in improper authorization | 6.2.11 |
| high | CVE-2015-5211 | Files or Directories Accessible to External Parties in org.springframework:spring-core | 3.2.15 |
| high | CVE-2024-22233 | Spring Framework server Web DoS Vulnerability | 6.0.16 |
| medium | CVE-2018-1257 | Denial of Service in org.springframework:spring-core | 4.3.17 |
| medium | CVE-2021-22096 | Improper Output Neutralization for Logs in Spring Framework | 5.3.11 |
| medium | CVE-2014-3578 | Improper Limitation of a Pathname to a Restricted Directory in Spring Framework | 4.0.5 |
| medium | CVE-2018-1199 | Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core | 4.1.5 |
| medium | CVE-2009-1190 | Spring Framework Inefficient Regular Expression Complexity | 3.0.0.RELEASE |
| high | CVE-2011-2730 | Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework | 2.5.7.SR023 |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/maven/org.springframework:spring-coreFirst published · 2016-12-21T12:52:18+00:00
Last updated · 2025-06-12T10:14:17+00:00