CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
6.5 MediumFix available
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.97%Up 0.9 points since Mar 24, 2023
What each source reports
NVD Score used
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
CVE-2023-20861- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
CVE-2023-20861- Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2023-0877
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
EUVD-2023-0877- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-564r-hj7v-mcr5
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
GHSA-564r-hj7v-mcr5- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-917
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-20861
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
DEBIAN-CVE-2023-20861- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-564r-hj7v-mcr5
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
GHSA-564r-hj7v-mcr5- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-917
- Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-25544e781d50b856
Lightwell Security Advisory: spring-expression 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-expression 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2025-41249, CVE-2024-38816, CVE-2024-22243, CVE-2024-38808, CVE-2023-20863, and CVE-2023-20861.
CVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
CVE-2025-41249: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
CVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Specifically, an application is vulnerable when both of the following are true:
- the web application uses RouterFunctions to serve static resources
- resource handling is explicitly configured with a FileSystemResource location
However, malicious requests are blocked and rejected when any of the following is true:
- the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
- the application runs on Tomcat or Jetty
CVE-2024-22243: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
CVE-2024-38808: CVE-2024-38808: Spring Expression DoS Vulnerability
CVE-2023-20863: In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
CVE-2023-20861: In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
This patched artifact is a drop-in replacement for org.springframework:spring-expression 5.3.18 from Maven Central.
- Record
RHLW-2026-25544e781d50b856- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2023:3610
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3610- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:3622
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3622- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:3771
Red Hat Security Advisory: Red Hat Virtualization security and bug fix update
- Record
RHSA-2023:3771- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:0778
Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update
- Record
RHSA-2024:0778- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2023-20861
CVE-2023-20861 in org.springframework:spring-expression - Patched by Root
Root has patched CVE-2023-20861 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2023-20861- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-20861
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
- Record
UBUNTU-CVE-2023-20861- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1756771563 No score
TuxCare security update for org.springframework (16 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.
- Record
CLSA-2025-1756771563- Updated
- 2026-11-02
OSVCLSA-2025-1760313981 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313981- Updated
- 2026-11-02
OSVCLSA-2025-1760313986 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313986- Updated
- 2026-11-02
OSVCLSA-2026-1776040412 No score
TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.
- Record
CLSA-2026-1776040412- Updated
- 2026-11-02
OSVCLSA-2026-1776126823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.
- Record
CLSA-2026-1776126823- Updated
- 2026-11-02
OSVCLSA-2026-1781657700 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.25-tuxcare.3.
- Record
CLSA-2026-1781657700- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1786569587 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.9.
- Record
CLSA-2026-1786569587- Updated
- 2026-11-02
OSVCLSA-2026-1787070801 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4.
- Record
CLSA-2026-1787070801- Updated
- 2026-11-02
OSVCLSA-2026-1788341776 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788341776- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788361406 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.
- Record
CLSA-2026-1788361406- Updated
- 2026-11-02
OSVCLSA-2026-1788372470 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788372470- Updated
- 2026-11-02
OSVCLSA-2026-1788782570 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.11.
- Record
CLSA-2026-1788782570- Updated
- 2026-11-02
OSVCLSA-2026-1788804848 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.
- Record
CLSA-2026-1788804848- Updated
- 2026-11-02
OSVCLSA-2026-1788813738 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788813738- Updated
- 2026-11-02
OSVCLSA-2026-1788865685 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788865685- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1789416166 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.5.
- Record
CLSA-2026-1789416166- Updated
- 2026-11-02
OSVCLSA-2026-1790069660 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.
- Record
CLSA-2026-1790069660- Updated
- 2026-11-02
OSVCLSA-2026-1790069975 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.
- Record
CLSA-2026-1790069975- Updated
- 2026-11-02
OSVCLSA-2026-1790070464 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.
- Record
CLSA-2026-1790070464- Updated
- 2026-11-02
OSVCLSA-2026-1790071189 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.
- Record
CLSA-2026-1790071189- Updated
- 2026-11-02
OSVCLSA-2026-1790074038 No score
TuxCare security update for org.springframework (30 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4.
- Record
CLSA-2026-1790074038- Updated
- 2026-11-02
OSVCLSA-2026-1790074384 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.
- Record
CLSA-2026-1790074384- Updated
- 2026-11-02
OSVCLSA-2026-1790857021 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 25 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790857021- Updated
- 2026-11-02
OSVCLSA-2026-1790970183 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790970183- Updated
- 2026-11-02
OSVCLSA-2026-1790970528 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790970528- Updated
- 2026-11-02
OSVCLSA-2026-1791107509 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791107509- Updated
- 2026-11-02
OSVCLSA-2026-1791213084 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791213084- Updated
- 2026-11-02
OSVCLSA-2026-1791218458 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218458- Updated
- 2026-11-02
OSVCLSA-2026-1791218487 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218487- Updated
- 2026-11-02
OSVCLSA-2026-1791289094 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791289094- Updated
- 2026-11-02
OSVCLSA-2026-1791463819 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791463819- Updated
- 2026-11-02
OSVCLSA-2026-1791464078 No score
TuxCare security update for org.springframework (15 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 15 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.7.
- Record
CLSA-2026-1791464078- Updated
- 2026-11-02
OSVCLSA-2026-1791464212 No score
TuxCare security update for org.springframework (30 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 30 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1791464212- Updated
- 2026-11-02
OSVCLSA-2026-1792590655 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792590655- Updated
- 2026-11-02
OSVCLSA-2026-1792590787 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792590787- Updated
- 2026-11-02
OSVCLSA-2026-1792591113 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.
- Record
CLSA-2026-1792591113- Updated
- 2026-11-02
OSVCLSA-2026-1793057670 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 20 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1793057670- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-expressionMaven |
6.0.0 up to 6.0.7 | 6.0.7 |
org.springframework:spring-expressionMaven |
5.3.0 up to 5.3.26 | 5.3.26 |
org.springframework:spring-expressionMaven |
before 5.2.23.RELEASE | 5.2.23.RELEASE |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
Show 218 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-contextTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-oxmTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 13 CVEs |
5.3.7 up to 5.3.7-tuxcare.2, plus listed versions 5.3.7-tuxcare.1 |
5.3.7-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 2 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.9, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.8 |
5.2.13.RELEASE-tuxcare.9 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.9, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.8 |
5.2.13.RELEASE-tuxcare.9 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 4 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.11, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.104.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.4 Show 5 moreShow less4.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.11 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.11, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.104.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.4 Show 5 moreShow less4.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.11 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.11, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.104.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.4 Show 5 moreShow less4.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.11 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.5, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.34.3.25.RELEASE-tuxcare.4 |
4.3.25.RELEASE-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.5, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.34.3.4.RELEASE-tuxcare.4 |
4.3.4.RELEASE-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:springTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
5.1.18.RELEASE up to 5.1.18.RELEASE-tuxcare.1 | 5.1.18.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 25 CVEs |
5.1.18.RELEASE up to 5.1.18.RELEASE-tuxcare.1 | 5.1.18.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 25 CVEs |
5.1.18.RELEASE up to 5.1.18.RELEASE-tuxcare.1 | 5.1.18.RELEASE-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
org.springframework:spring-expressionMaven |
6.0.0 up to 6.0.7, plus listed versions 6.0.16.0.26.0.36.0.46.0.56.0.6 |
6.0.7 |
org.springframework:spring-expressionMaven |
5.3.0 up to 5.3.26, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 20 moreShow less5.3.145.3.155.3.165.3.175.3.185.3.195.3.25.3.205.3.215.3.225.3.235.3.245.3.255.3.35.3.45.3.55.3.65.3.75.3.85.3.9 |
5.3.26 |
org.springframework:spring-expressionMaven |
before 5.2.23.RELEASE, plus listed versions 3.0.0.RELEASE3.0.1.RELEASE3.0.2.RELEASE3.0.3.RELEASE3.0.4.RELEASE Show 45 moreShow less3.0.5.RELEASE3.0.6.RELEASE3.0.7.RELEASE3.1.0.RELEASE3.1.1.RELEASE3.1.2.RELEASE3.1.3.RELEASE3.1.4.RELEASE3.2.0.RELEASE3.2.1.RELEASE3.2.10.RELEASE3.2.11.RELEASE3.2.12.RELEASE3.2.13.RELEASE3.2.14.RELEASE3.2.15.RELEASE3.2.16.RELEASE3.2.17.RELEASE3.2.18.RELEASE3.2.2.RELEASE3.2.3.RELEASE3.2.4.RELEASE3.2.5.RELEASE3.2.6.RELEASE3.2.7.RELEASE3.2.8.RELEASE3.2.9.RELEASE4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE |
5.2.23.RELEASE |
org.springframework:spring-expressionRed Hat Lightwell:Maven From an advisory covering 7 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 3.0.0.RELEASE3.0.1.RELEASE3.0.2.RELEASE3.0.3.RELEASE3.0.4.RELEASE Show 45 moreShow less3.0.5.RELEASE3.0.6.RELEASE3.0.7.RELEASE3.1.0.RELEASE3.1.1.RELEASE3.1.2.RELEASE3.1.3.RELEASE3.1.4.RELEASE3.2.0.RELEASE3.2.1.RELEASE3.2.10.RELEASE3.2.11.RELEASE3.2.12.RELEASE3.2.13.RELEASE3.2.14.RELEASE3.2.15.RELEASE3.2.16.RELEASE3.2.17.RELEASE3.2.18.RELEASE3.2.2.RELEASE3.2.3.RELEASE3.2.4.RELEASE3.2.5.RELEASE3.2.6.RELEASE3.2.7.RELEASE3.2.8.RELEASE3.2.9.RELEASE4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE |
5.3.18.rhlw-00010 |
jenkinsRed Hat:ocp_tools:4.12::el8 From an advisory covering 13 CVEs |
before 0:2.401.1.1686649641-3.el8 | 0:2.401.1.1686649641-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 13 CVEs |
before 0:4.12.1686649756-1.el8 | 0:4.12.1686649756-1.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.13::el8 From an advisory covering 9 CVEs |
before 0:4.13.1686680473-1.el8 | 0:4.13.1686680473-1.el8 |
jenkinsRed Hat:ocp_tools:4.13::el8 From an advisory covering 9 CVEs |
before 0:2.401.1.1686680404-3.el8 | 0:2.401.1.1686680404-3.el8 |
ovirt-dependenciesRed Hat:rhev_manager:4.4:el8 From an advisory covering 2 CVEs |
before 0:4.5.3-1.el8ev | 0:4.5.3-1.el8ev |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 24 CVEs |
before 0:4.12.1706515741-1.el8 | 0:4.12.1706515741-1.el8 |
jenkinsRed Hat:ocp_tools:4.12::el8 From an advisory covering 24 CVEs |
before 0:2.426.3.1706515686-3.el8 | 0:2.426.3.1706515686-3.el8 |
org.springframework:spring-expressionRoot:Maven |
before 5.3.20-aikido.4 | 5.3.20-aikido.45.3.20-aikido.55.3.20-aikido.65.3.20-aikido.75.3.20-aikido.8 |
io.root.org.springframework:spring-expressionRoot:Maven |
before 5.3.20-root.io.4 | 5.3.20-root.io.45.3.20-root.io.55.3.20-root.io.65.3.20-root.io.75.3.20-root.io.8 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20861 is a medium vulnerability (CVSS 6.5) in Vmware Spring Framework, published March 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. Fixed in org.springframework:spring-expression 6.0.7.
References
spring.io/security/cve-2023-20861
security.netapp.com/advisory/ntap-20230420-0007
nvd.nist.gov/vuln/detail/CVE-2023-20861
github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1
Show 194 moreShow less
security-tracker.debian.org/tracker/CVE-2023-20861
access.redhat.com/errata/RHSA-2023:3610
bugzilla.redhat.com/show_bug.cgi?id=2066479
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3610.json
cve.org/CVERecord?id=CVE-2021-46877
jenkins.io/security/advisory/2022-05-17
research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633
docs.openshift.com/container-platform/4.13/cicd/jenkins/important-changes-to-openshift-jenkins-images.html
issues.redhat.com/browse/JKNS-271
maven.apache.org/docs/3.8.1/release-notes.html
go.dev/issue/53616
groups.google.com/g/golang-announce/c/nqrv9fbR0zE
bitbucket.org/snakeyaml/snakeyaml/issues/525
blogs.apache.org/security/entry/cve-2022-42889
lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
seclists.org/oss-sec/2022/q4/22
rfc-editor.org/rfc/rfc9110
openwall.com/lists/oss-security/2024/01/24/6
cisa.gov/known-exploited-vulnerabilities-catalog
ubuntu.com/security/CVE-2023-20861
This page doesn't list everything
Left out here: 238 versions and 42 references. The JSON record has them. Also not on the record: 187 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 8 source records.