CVE-2022-22950

Allocation of Resources Without Limits or Throttling in Spring Framework

6.5 MediumFix available

What does this mean?

: 6.5v3.1, from NVD
: 36.9%98th percentile
Fixed in: 5.3.17org.springframework:spring-expression
Published: April 1, 2022
Modified: November 6, 2026
Weakness: CWE-770
Also known as: CLSA-2025-1756771563CLSA-2025-1760313981CLSA-2025-1760313986CLSA-2026-1774916754CLSA-2026-1776040408CLSA-2026-1776040412CLSA-2026-1776213242CLSA-2026-1777250295
Show 36 moreShow less
CLSA-2026-1777509606CLSA-2026-1777941826CLSA-2026-1779842933CLSA-2026-1782867606CLSA-2026-1784769547CLSA-2026-1784769551CLSA-2026-1785957138CLSA-2026-1785959911CLSA-2026-1786342108CLSA-2026-1786611721CLSA-2026-1787313469CLSA-2026-1789380988CLSA-2026-1790157664CLSA-2026-1790878884CLSA-2026-1791213084CLSA-2026-1791218458CLSA-2026-1792575333CLSA-2026-1792591113CLSA-2026-1793095557CLSA-2026-1793103567CLSA-2026-1793104869CLSA-2026-1793107019CLSA-2026-1793202493CLSA-2026-1793615948CLSA-2026-1793635118CLSA-2026-1793636640CLSA-2026-1793637145CLSA-2026-1793883499CLSA-2026-1793884148CLSA-2026-1793884738DEBIAN-CVE-2022-22950EUVD-2022-1628GHSA-558x-2xjg-6232OESA-2025-1557RHSA-2022:5555UBUNTU-CVE-2022-22950

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

36.9%Up 36.0 points since Apr 2, 2022

What each source reports

NVD Score used 6.5

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: CVE-2022-22950
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness: CWE-770
Updated: 2026-11-02

CVE List No score

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: CVE-2022-22950
Weakness: CWE-770
Updated: 2026-11-02

EUVDEUVD-2022-1628 No score

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: EUVD-2022-1628
Updated: 2026-11-02

GitHub AdvisoriesGHSA-558x-2xjg-6232 6.5

Allocation of Resources Without Limits or Throttling in Spring Framework

In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: GHSA-558x-2xjg-6232
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-770
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-22950 6.5

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: DEBIAN-CVE-2022-22950
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVGHSA-558x-2xjg-6232 6.5

Allocation of Resources Without Limits or Throttling in Spring Framework

Record: GHSA-558x-2xjg-6232
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-770
Updated: 2026-11-02

Show 42 moreShow less

OSVOESA-2025-1557 6.5

springframework security update

The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.

Security Fix(es):

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.(CVE-2022-22950)

Record: OESA-2025-1557
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:5555 7.5

Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.1] security, bug fix and update

Record: RHSA-2022:5555
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-22950 6.5

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: UBUNTU-CVE-2022-22950
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVCLSA-2025-1756771563 No score

TuxCare security update for org.springframework (16 CVEs)

TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.

Record: CLSA-2025-1756771563
Updated: 2026-11-02

OSVCLSA-2025-1760313981 No score

TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.

Record: CLSA-2025-1760313981
Updated: 2026-11-02

OSVCLSA-2025-1760313986 No score

TuxCare security update for org.springframework (29 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.

Record: CLSA-2025-1760313986
Updated: 2026-11-02

OSVCLSA-2026-1774916754 No score

TuxCare security update for org.springframework:spring-expression (1 CVE)

TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.2.

Record: CLSA-2026-1774916754
Updated: 2026-11-02

OSVCLSA-2026-1776040408 No score

TuxCare security update for org.springframework:spring-expression (1 CVE)

TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.3.

Record: CLSA-2026-1776040408
Updated: 2026-11-02

OSVCLSA-2026-1776040412 No score

TuxCare security update for org.springframework (13 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.

Record: CLSA-2026-1776040412
Updated: 2026-11-02

OSVCLSA-2026-1776213242 No score

TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.

Record: CLSA-2026-1776213242
Updated: 2026-11-02

OSVCLSA-2026-1777250295 No score

TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.3.

Record: CLSA-2026-1777250295
Updated: 2026-11-02

OSVCLSA-2026-1777509606 No score

TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.1.

Record: CLSA-2026-1777509606
Updated: 2026-11-02

OSVCLSA-2026-1777941826 No score

TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.

Record: CLSA-2026-1777941826
Updated: 2026-11-02

OSVCLSA-2026-1779842933 No score

TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.2.

Record: CLSA-2026-1779842933
Updated: 2026-11-02

OSVCLSA-2026-1782867606 No score

TuxCare security update for org.springframework (12 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.

Record: CLSA-2026-1782867606
Updated: 2026-11-02

OSVCLSA-2026-1784769547 No score

TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1.

Record: CLSA-2026-1784769547
Updated: 2026-11-02

OSVCLSA-2026-1784769551 No score

TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.1.

Record: CLSA-2026-1784769551
Updated: 2026-11-02

OSVCLSA-2026-1785957138 No score

TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.

Record: CLSA-2026-1785957138
Updated: 2026-11-02

OSVCLSA-2026-1785959911 No score

TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.3.

Record: CLSA-2026-1785959911
Updated: 2026-11-02

OSVCLSA-2026-1786342108 No score

TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3.

Record: CLSA-2026-1786342108
Updated: 2026-11-02

OSVCLSA-2026-1786611721 No score

TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.3.

Record: CLSA-2026-1786611721
Updated: 2026-11-02

OSVCLSA-2026-1787313469 No score

TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3.

Record: CLSA-2026-1787313469
Updated: 2026-11-02

OSVCLSA-2026-1789380988 No score

TuxCare security update for org.springframework (20 CVEs)

TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.

Record: CLSA-2026-1789380988
Updated: 2026-11-02

OSVCLSA-2026-1790157664 No score

TuxCare security update for org.springframework (29 CVEs)

TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.

Record: CLSA-2026-1790157664
Updated: 2026-11-02

OSVCLSA-2026-1790878884 No score

TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.

Record: CLSA-2026-1790878884
Updated: 2026-11-02

OSVCLSA-2026-1791213084 No score

TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.

Record: CLSA-2026-1791213084
Updated: 2026-11-02

OSVCLSA-2026-1791218458 No score

TuxCare security update for org.springframework (28 CVEs)

TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.

Record: CLSA-2026-1791218458
Updated: 2026-11-02

OSVCLSA-2026-1792575333 No score

TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.

Record: CLSA-2026-1792575333
Updated: 2026-11-02

OSVCLSA-2026-1792591113 No score

TuxCare security update for org.springframework (31 CVEs)

TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.

Record: CLSA-2026-1792591113
Updated: 2026-11-02

OSVCLSA-2026-1793095557 No score

TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.13-tuxcare.3.

Record: CLSA-2026-1793095557
Updated: 2026-11-02

OSVCLSA-2026-1793103567 No score

TuxCare security update for org.springframework:spring-expression (1 CVE)

TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 4.3.20.RELEASE-tuxcare.2.

Record: CLSA-2026-1793103567
Updated: 2026-11-02

OSVCLSA-2026-1793104869 No score

TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.2.

Record: CLSA-2026-1793104869
Updated: 2026-11-02

OSVCLSA-2026-1793107019 No score

TuxCare security update for org.springframework:spring-expression (1 CVE)

TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.1.19.RELEASE-tuxcare.3.

Record: CLSA-2026-1793107019
Updated: 2026-11-02

OSVCLSA-2026-1793202493 No score

TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.2.

Record: CLSA-2026-1793202493
Updated: 2026-11-02

OSVCLSA-2026-1793615948 No score

TuxCare security update for org.springframework (17 CVEs)

TuxCare rebuilt 9 org.springframework packages to address 17 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.3.

Record: CLSA-2026-1793615948
Updated: 2026-11-02

OSVCLSA-2026-1793635118 No score

TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.2.

Record: CLSA-2026-1793635118
Updated: 2026-11-02

OSVCLSA-2026-1793636640 No score

TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.2.

Record: CLSA-2026-1793636640
Updated: 2026-11-02

OSVCLSA-2026-1793637145 No score

TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.2.

Record: CLSA-2026-1793637145
Updated: 2026-11-02

OSVCLSA-2026-1793883499 No score

TuxCare security update for org.springframework (18 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 18 CVEs. Fixed in 5.2.8.RELEASE-tuxcare.3.

Record: CLSA-2026-1793883499
Updated: 2026-11-06

OSVCLSA-2026-1793884148 No score

TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.3-tuxcare.4.

Record: CLSA-2026-1793884148
Updated: 2026-11-06

OSVCLSA-2026-1793884738 No score

TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.3.5-tuxcare.3.

Record: CLSA-2026-1793884738
Updated: 2026-11-06

OSV No score

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

Record: CVE-2022-22950
Weakness: CWE-770
Updated: 2026-11-02

Affected products

vmware spring framework

Affected packages

Affected packages
Package	Affected	Fixed
`org.springframework:spring-expression` Maven	5.3.0 up to 5.3.17	5.3.17
`org.springframework:spring-expression` Maven	before 5.2.20.RELEASE	5.2.20.RELEASE
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 16 CVEs	4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1	4.3.30.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1

Show 215 moreShow less

Affected packages
Package	Affected	Fixed
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 25 CVEs	4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1	4.0.0.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-oxm` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 29 CVEs	3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1	3.1.1.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven	5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.2, plus listed versions 5.2.13.RELEASE-tuxcare.1	5.2.13.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven	5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.3, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.2	5.2.0.RELEASE-tuxcare.3
`org.springframework:spring` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 13 CVEs	5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1	5.3.7-tuxcare.2
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 6 CVEs	5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1	5.1.5.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 5 CVEs	4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.3, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.2	4.1.7.RELEASE-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 5 CVEs	4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.3, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.2	4.1.7.RELEASE-tuxcare.3
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 5 CVEs	4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.3, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.2	4.1.7.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 5 CVEs	4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.3, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.2	4.1.7.RELEASE-tuxcare.3
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 8 CVEs	4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.1	4.2.9.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 8 CVEs	4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.1	4.2.9.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 8 CVEs	4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.1	4.2.9.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 8 CVEs	4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.1	4.2.9.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 10 CVEs	5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1	5.1.20.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 3 CVEs	3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.2, plus listed versions 3.0.5.RELEASE-tuxcare.1	3.0.5.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 3 CVEs	3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.2, plus listed versions 3.0.5.RELEASE-tuxcare.1	3.0.5.RELEASE-tuxcare.2
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 3 CVEs	3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.2, plus listed versions 3.0.5.RELEASE-tuxcare.1	3.0.5.RELEASE-tuxcare.2
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 12 CVEs	4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1	4.1.9.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 6 CVEs	5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1	5.1.6.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 9 CVEs	5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1	5.1.9.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 11 CVEs	5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1	5.0.13.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 5 CVEs	5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2	5.0.5.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 5 CVEs	5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2	5.0.5.RELEASE-tuxcare.3
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 5 CVEs	5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2	5.0.5.RELEASE-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 5 CVEs	5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2	5.0.5.RELEASE-tuxcare.3
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 5 CVEs	5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2	5.0.5.RELEASE-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 4 CVEs	4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2	4.3.9.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 4 CVEs	4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2	4.3.9.RELEASE-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 4 CVEs	4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2	4.3.9.RELEASE-tuxcare.3
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 4 CVEs	4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2	4.3.9.RELEASE-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 4 CVEs	4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2	4.3.25.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 4 CVEs	4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2	4.3.25.RELEASE-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 4 CVEs	4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2	4.3.25.RELEASE-tuxcare.3
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 7 CVEs	4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2	4.3.4.RELEASE-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 7 CVEs	4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2	4.3.4.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 7 CVEs	4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2	4.3.4.RELEASE-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 7 CVEs	4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2	4.3.4.RELEASE-tuxcare.3
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 7 CVEs	4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2	4.3.4.RELEASE-tuxcare.3
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 20 CVEs	5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1	5.2.11.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 29 CVEs	5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1	5.2.10.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-framework-bom` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 34 CVEs	5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1	5.1.8.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 25 CVEs	4.3.26.RELEASE up to 4.3.26.RELEASE-tuxcare.1	4.3.26.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 28 CVEs	4.3.27.RELEASE up to 4.3.27.RELEASE-tuxcare.1	4.3.27.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-framework-bom` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 34 CVEs	5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1	5.1.7.RELEASE-tuxcare.1
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-context-support` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-jms` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-messaging` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 31 CVEs	5.3.15 up to 5.3.15-tuxcare.1	5.3.15-tuxcare.1
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 2 CVEs	5.3.13 up to 5.3.13-tuxcare.3, plus listed versions 5.3.13-tuxcare.15.3.13-tuxcare.2	5.3.13-tuxcare.3
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 2 CVEs	5.3.13 up to 5.3.13-tuxcare.3, plus listed versions 5.3.13-tuxcare.15.3.13-tuxcare.2	5.3.13-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 2 CVEs	5.3.13 up to 5.3.13-tuxcare.3, plus listed versions 5.3.13-tuxcare.15.3.13-tuxcare.2	5.3.13-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven	4.3.20.RELEASE up to 4.3.20.RELEASE-tuxcare.2, plus listed versions 4.3.20.RELEASE-tuxcare.1	4.3.20.RELEASE-tuxcare.2
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 4 CVEs	4.3.21.RELEASE up to 4.3.21.RELEASE-tuxcare.2, plus listed versions 4.3.21.RELEASE-tuxcare.1	4.3.21.RELEASE-tuxcare.2
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 4 CVEs	4.3.21.RELEASE up to 4.3.21.RELEASE-tuxcare.2, plus listed versions 4.3.21.RELEASE-tuxcare.1	4.3.21.RELEASE-tuxcare.2
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 4 CVEs	4.3.21.RELEASE up to 4.3.21.RELEASE-tuxcare.2, plus listed versions 4.3.21.RELEASE-tuxcare.1	4.3.21.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 4 CVEs	4.3.21.RELEASE up to 4.3.21.RELEASE-tuxcare.2, plus listed versions 4.3.21.RELEASE-tuxcare.1	4.3.21.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven	5.1.19.RELEASE up to 5.1.19.RELEASE-tuxcare.3, plus listed versions 5.1.19.RELEASE-tuxcare.15.1.19.RELEASE-tuxcare.2	5.1.19.RELEASE-tuxcare.3
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 3 CVEs	4.3.16.RELEASE up to 4.3.16.RELEASE-tuxcare.2, plus listed versions 4.3.16.RELEASE-tuxcare.1	4.3.16.RELEASE-tuxcare.2
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 3 CVEs	4.3.16.RELEASE up to 4.3.16.RELEASE-tuxcare.2, plus listed versions 4.3.16.RELEASE-tuxcare.1	4.3.16.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 3 CVEs	4.3.16.RELEASE up to 4.3.16.RELEASE-tuxcare.2, plus listed versions 4.3.16.RELEASE-tuxcare.1	4.3.16.RELEASE-tuxcare.2
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-core` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-framework-bom` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-webflux` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 17 CVEs	5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.3, plus listed versions 5.2.7.RELEASE-tuxcare.15.2.7.RELEASE-tuxcare.2	5.2.7.RELEASE-tuxcare.3
`org.springframework:spring-beans` TuxCare:Maven From an advisory covering 7 CVEs	4.3.5.RELEASE up to 4.3.5.RELEASE-tuxcare.2, plus listed versions 4.3.5.RELEASE-tuxcare.1	4.3.5.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 7 CVEs	4.3.5.RELEASE up to 4.3.5.RELEASE-tuxcare.2, plus listed versions 4.3.5.RELEASE-tuxcare.1	4.3.5.RELEASE-tuxcare.2
`org.springframework:spring-web` TuxCare:Maven From an advisory covering 7 CVEs	4.3.5.RELEASE up to 4.3.5.RELEASE-tuxcare.2, plus listed versions 4.3.5.RELEASE-tuxcare.1	4.3.5.RELEASE-tuxcare.2
`org.springframework:spring-webmvc` TuxCare:Maven From an advisory covering 7 CVEs	4.3.5.RELEASE up to 4.3.5.RELEASE-tuxcare.2, plus listed versions 4.3.5.RELEASE-tuxcare.1	4.3.5.RELEASE-tuxcare.2
`org.springframework:spring-websocket` TuxCare:Maven From an advisory covering 7 CVEs	4.3.5.RELEASE up to 4.3.5.RELEASE-tuxcare.2, plus listed versions 4.3.5.RELEASE-tuxcare.1	4.3.5.RELEASE-tuxcare.2
`org.springframework:spring-context` TuxCare:Maven From an advisory covering 10 CVEs	5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.2, plus listed versions 5.1.13.RELEASE-tuxcare.1	5.1.13.RELEASE-tuxcare.2
`org.springframework:spring-expression` TuxCare:Maven From an advisory covering 10 CVEs	5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.2, plus listed versions 5.1.13.RELEASE-tuxcare.1	5.1.13.RELEASE-tuxcare.2
`libspring-java` Debian:12	All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1	None known
`libspring-java` Debian:13	All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1	None known
`libspring-java` Debian:14	All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1	None known
`org.springframework:spring-expression` Maven	5.3.0 up to 5.3.17, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 11 moreShow less 5.3.145.3.155.3.165.3.25.3.35.3.45.3.55.3.65.3.75.3.85.3.9	5.3.17
`org.springframework:spring-expression` Maven	before 5.2.20.RELEASE, plus listed versions 3.0.0.RELEASE3.0.1.RELEASE3.0.2.RELEASE3.0.3.RELEASE3.0.4.RELEASE Show 45 moreShow less 3.0.5.RELEASE3.0.6.RELEASE3.0.7.RELEASE3.1.0.RELEASE3.1.1.RELEASE3.1.2.RELEASE3.1.3.RELEASE3.1.4.RELEASE3.2.0.RELEASE3.2.1.RELEASE3.2.10.RELEASE3.2.11.RELEASE3.2.12.RELEASE3.2.13.RELEASE3.2.14.RELEASE3.2.15.RELEASE3.2.16.RELEASE3.2.17.RELEASE3.2.18.RELEASE3.2.2.RELEASE3.2.3.RELEASE3.2.4.RELEASE3.2.5.RELEASE3.2.6.RELEASE3.2.7.RELEASE3.2.8.RELEASE3.2.9.RELEASE4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE	5.2.20.RELEASE
`springframework` openEuler:22.03-LTS-SP3	before 3.2.18-14.oe2203sp3	3.2.18-14.oe2203sp3
`springframework` openEuler:22.03-LTS-SP4	before 3.2.18-14.oe2203sp4	3.2.18-14.oe2203sp4
`springframework` openEuler:24.03-LTS	before 3.2.18-15.oe2403sp1	3.2.18-15.oe2403sp1
`springframework` openEuler:24.03-LTS-SP1	before 3.2.18-15.oe2403sp1	3.2.18-15.oe2403sp1
`springframework` openEuler:20.03-LTS-SP4	before 3.2.18-13.oe2003sp4	3.2.18-13.oe2003sp4
`ovirt-web-ui` Red Hat:rhev_manager:4.4:el8 From an advisory covering 9 CVEs	before 0:1.9.0-1.el8ev	0:1.9.0-1.el8ev
`ovirt-dependencies` Red Hat:rhev_manager:4.4:el8 From an advisory covering 9 CVEs	before 0:4.5.2-1.el8ev	0:4.5.2-1.el8ev
`apache-commons-compress` Red Hat:rhev_manager:4.4:el8 From an advisory covering 9 CVEs	before 0:1.21-1.2.el8ev	0:1.21-1.2.el8ev
`apache-commons-compress-javadoc` Red Hat:rhev_manager:4.4:el8 From an advisory covering 9 CVEs	before 0:1.21-1.2.el8ev	0:1.21-1.2.el8ev
`libspring-java` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less 3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2	None known
`libspring-java` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1	None known
`libspring-java` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1	None known
`libspring-java` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1	None known
`libspring-java` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1	None known
`libspring-java` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1	None known
`libspring-java` Ubuntu:25.10	All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1	None known
`libspring-java` Ubuntu:26.10	All versions, plus listed versions 4.3.30-3ubuntu1	None known
`libspring-java` Ubuntu:26.04:LTS	All versions, plus listed versions 4.3.30-3ubuntu1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected_more, aliases	OSV
Nov 6, 2026	affected, facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-22950 is a medium vulnerability (CVSS 6.5) in Vmware Spring Framework, published April 1, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 36.9%, the 98th percentile. Fixed in org.springframework:spring-expression 5.3.17.