CVE-2024-38809
Spring Framework DoS via conditional HTTP request
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- Record
CVE-2024-38809- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2024-2696
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- Record
EUVD-2024-2696- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2rmj-mq67-h97g
Spring Framework DoS via conditional HTTP request
Description
Applications that parse ETags from If-Match or If-None-Match request headers are vulnerable to DoS attack.
Affected Spring Products and Versions
org.springframework:spring-web in versions
6.1.0 through 6.1.11 6.0.0 through 6.0.22 5.3.0 through 5.3.37
Older, unsupported versions are also affected
Mitigation
Users of affected versions should upgrade to the corresponding fixed version. 6.1.x -> 6.1.12 6.0.x -> 6.0.23 5.3.x -> 5.3.38 No other mitigation steps are necessary.
Users of older, unsupported versions could enforce a size limit on If-Match and If-None-Match headers, e.g. through a Filter.
- Record
GHSA-2rmj-mq67-h97g- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-400, CWE-1333
- Updated
- 2026-11-02
NVD
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- Record
CVE-2024-38809- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-38809
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- Record
DEBIAN-CVE-2024-38809- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGHSA-2rmj-mq67-h97g
Spring Framework DoS via conditional HTTP request
Description
Applications that parse ETags from If-Match or If-None-Match request headers are vulnerable to DoS attack.
Affected Spring Products and Versions
org.springframework:spring-web in versions
6.1.0 through 6.1.11 6.0.0 through 6.0.22 5.3.0 through 5.3.37
Older, unsupported versions are also affected
Mitigation
Users of affected versions should upgrade to the corresponding fixed version. 6.1.x -> 6.1.12 6.0.x -> 6.0.23 5.3.x -> 5.3.38 No other mitigation steps are necessary.
Users of older, unsupported versions could enforce a size limit on If-Match and If-None-Match headers, e.g. through a Filter.
- Record
GHSA-2rmj-mq67-h97g- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-1333, CWE-400
- Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-a9afa2d7b2973961
Lightwell Security Advisory: spring-web 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-web 5.3.18.rhlw-00010 with backported fixes for CVE-2016-1000027, CVE-2024-22259, CVE-2024-22262, CVE-2024-38809, and CVE-2024-38820.
CVE-2016-1000027: Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data.
CVE-2024-22259: CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)
CVE-2024-22262: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259 and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.
CVE-2024-38809: Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
CVE-2024-38820: CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception
This patched artifact is a drop-in replacement for org.springframework:spring-web 5.3.18 from Maven Central.
- Record
RHLW-2026-a9afa2d7b2973961- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2024-38809
CVE-2024-38809 in org.springframework:spring-web - Patched by Root
Root has patched CVE-2024-38809 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2024-38809- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-38809
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- Record
UBUNTU-CVE-2024-38809- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVCLSA-2025-1751328209 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1.
- Record
CLSA-2025-1751328209- Updated
- 2026-11-02
OSVCLSA-2025-1756771563 No score
TuxCare security update for org.springframework (16 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.
- Record
CLSA-2025-1756771563- Updated
- 2026-11-02
OSVCLSA-2025-1760313981 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313981- Updated
- 2026-11-02
OSVCLSA-2025-1760313986 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313986- Updated
- 2026-11-02
OSVCLSA-2025-1761696401 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.
- Record
CLSA-2025-1761696401- Updated
- 2026-11-02
OSVCLSA-2025-1762906011 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.
- Record
CLSA-2025-1762906011- Updated
- 2026-11-02
OSVCLSA-2025-1765411678 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2.
- Record
CLSA-2025-1765411678- Updated
- 2026-11-02
OSVCLSA-2025-1766016492 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.1.
- Record
CLSA-2025-1766016492- Updated
- 2026-11-02
OSVCLSA-2026-1774311639 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1774311639- Updated
- 2026-11-02
OSVCLSA-2026-1774916750 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.1.
- Record
CLSA-2026-1774916750- Updated
- 2026-11-02
OSVCLSA-2026-1774916751 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1.
- Record
CLSA-2026-1774916751- Updated
- 2026-11-02
OSVCLSA-2026-1776126823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.
- Record
CLSA-2026-1776126823- Updated
- 2026-11-02
OSVCLSA-2026-1777423179 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.3.25-tuxcare.2.
- Record
CLSA-2026-1777423179- Updated
- 2026-11-02
OSVCLSA-2026-1784769547 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1.
- Record
CLSA-2026-1784769547- Updated
- 2026-11-02
OSVCLSA-2026-1784769551 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.1.
- Record
CLSA-2026-1784769551- Updated
- 2026-11-02
OSVCLSA-2026-1785204448 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1785204448- Updated
- 2026-11-02
OSVCLSA-2026-1785727936 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.1.7-tuxcare.1.
- Record
CLSA-2026-1785727936- Updated
- 2026-11-02
OSVCLSA-2026-1785959911 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.3.
- Record
CLSA-2026-1785959911- Updated
- 2026-11-02
OSVCLSA-2026-1786342108 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3.
- Record
CLSA-2026-1786342108- Updated
- 2026-11-02
OSVCLSA-2026-1786611721 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.3.
- Record
CLSA-2026-1786611721- Updated
- 2026-11-02
OSVCLSA-2026-1787313469 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3.
- Record
CLSA-2026-1787313469- Updated
- 2026-11-02
OSVCLSA-2026-1787726639 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.4-tuxcare.1.
- Record
CLSA-2026-1787726639- Updated
- 2026-11-02
OSVCLSA-2026-1788344824 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.
- Record
CLSA-2026-1788344824- Updated
- 2026-11-02
OSVCLSA-2026-1788344832 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.
- Record
CLSA-2026-1788344832- Updated
- 2026-11-02
OSVCLSA-2026-1788346056 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.
- Record
CLSA-2026-1788346056- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788361406 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.
- Record
CLSA-2026-1788361406- Updated
- 2026-11-02
OSVCLSA-2026-1788372833 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.
- Record
CLSA-2026-1788372833- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1790069660 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.
- Record
CLSA-2026-1790069660- Updated
- 2026-11-02
OSVCLSA-2026-1790069975 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.
- Record
CLSA-2026-1790069975- Updated
- 2026-11-02
OSVCLSA-2026-1790070464 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.
- Record
CLSA-2026-1790070464- Updated
- 2026-11-02
OSVCLSA-2026-1790074384 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.
- Record
CLSA-2026-1790074384- Updated
- 2026-11-02
OSVCLSA-2026-1790157664 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790157664- Updated
- 2026-11-02
OSVCLSA-2026-1790878884 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790878884- Updated
- 2026-11-02
OSVCLSA-2026-1791213084 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791213084- Updated
- 2026-11-02
OSVCLSA-2026-1791218458 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218458- Updated
- 2026-11-02
OSVCLSA-2026-1792575333 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792575333- Updated
- 2026-11-02
OSVCLSA-2026-1793097080 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.4.
- Record
CLSA-2026-1793097080- Updated
- 2026-11-02
OSVCLSA-2026-1793099202 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.3.32-tuxcare.3.
- Record
CLSA-2026-1793099202- Updated
- 2026-11-02
OSVCLSA-2026-1793615948 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 17 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.3.
- Record
CLSA-2026-1793615948- Updated
- 2026-11-02
OSVCLSA-2026-1793616969 No score
TuxCare security update for org.springframework (16 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 16 CVEs. Fixed in 5.2.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1793616969- Updated
- 2026-11-02
OSVCLSA-2026-1793620066 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 6.0.14-tuxcare.3.
- Record
CLSA-2026-1793620066- Updated
- 2026-11-02
OSVCLSA-2026-1793626139 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.8.
- Record
CLSA-2026-1793626139- Updated
- 2026-11-02
OSVCLSA-2026-1793630574 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.3.23-tuxcare.4.
- Record
CLSA-2026-1793630574- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webMaven |
before 5.3.38 | 5.3.38 |
org.springframework:spring-webMaven |
6.0.0 up to 6.0.23 | 6.0.23 |
org.springframework:spring-webMaven |
6.1.0 up to 6.1.12 | 6.1.12 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 7 CVEs |
5.3.27 up to 5.3.27.tuxcare.1 | 5.3.27.tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
5.3.27 up to 5.3.27.tuxcare.1 | 5.3.27.tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.3.27 up to 5.3.27.tuxcare.1 | 5.3.27.tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.27 up to 5.3.27.tuxcare.1 | 5.3.27.tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
Show 211 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-oxmTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.29 up to 5.3.29-tuxcare.2, plus listed versions 5.3.29-tuxcare.1 |
5.3.29-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.29 up to 5.3.29-tuxcare.2, plus listed versions 5.3.29-tuxcare.1 |
5.3.29-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.29 up to 5.3.29-tuxcare.2, plus listed versions 5.3.29-tuxcare.1 |
5.3.29-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.1 | 5.3.37-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.1 | 5.3.37-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 6 CVEs |
5.3.25 up to 5.3.25-tuxcare.2, plus listed versions 5.3.25-tuxcare.1 |
5.3.25-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.3.25 up to 5.3.25-tuxcare.2, plus listed versions 5.3.25-tuxcare.1 |
5.3.25-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.3.25 up to 5.3.25-tuxcare.2, plus listed versions 5.3.25-tuxcare.1 |
5.3.25-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.3.25 up to 5.3.25-tuxcare.2, plus listed versions 5.3.25-tuxcare.1 |
5.3.25-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.1 | 5.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
6.1.7 up to 6.1.7-tuxcare.1 | 6.1.7-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
6.1.7 up to 6.1.7-tuxcare.1 | 6.1.7-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
6.1.7 up to 6.1.7-tuxcare.1 | 6.1.7-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
6.1.7 up to 6.1.7-tuxcare.1 | 6.1.7-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2 |
5.0.5.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2 |
5.0.5.RELEASE-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2 |
5.0.5.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2 |
5.0.5.RELEASE-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.3, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.2 |
5.0.5.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.1.4 up to 6.1.4-tuxcare.1 | 6.1.4-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
6.1.4 up to 6.1.4-tuxcare.1 | 6.1.4-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.1.4 up to 6.1.4-tuxcare.1 | 6.1.4-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.1.4 up to 6.1.4-tuxcare.1 | 6.1.4-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.1.4 up to 6.1.4-tuxcare.1 | 6.1.4-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 33 CVEs |
5.3.19 up to 5.3.19-tuxcare.1 | 5.3.19-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 33 CVEs |
5.3.18 up to 5.3.18-tuxcare.1 | 5.3.18-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 35 CVEs |
5.3.20 up to 5.3.20-tuxcare.1 | 5.3.20-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
org.springframework:spring-webMaven |
before 5.3.38, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.3.38 |
org.springframework:spring-webMaven |
6.0.0 up to 6.0.23, plus listed versions 6.0.16.0.106.0.116.0.126.0.13 Show 17 moreShow less6.0.146.0.156.0.166.0.176.0.186.0.196.0.26.0.206.0.216.0.226.0.36.0.46.0.56.0.66.0.76.0.86.0.9 |
6.0.23 |
org.springframework:spring-webMaven |
6.1.0 up to 6.1.12, plus listed versions 6.1.16.1.106.1.116.1.26.1.3 Show 6 moreShow less6.1.46.1.56.1.66.1.76.1.86.1.9 |
6.1.12 |
org.springframework:spring-webRed Hat Lightwell:Maven From an advisory covering 5 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-webRoot:Maven |
before 6.1.1-aikido.3 | 6.1.1-aikido.35.3.20-aikido.45.3.23-aikido.45.3.23-aikido.55.3.20-aikido.55.3.23-aikido.66.1.1-aikido.46.1.1-aikido.56.1.1-aikido.65.3.20-aikido.65.3.20-aikido.75.3.20-aikido.8 |
io.root.org.springframework:spring-webRoot:Maven |
before 6.1.1-root.io.2 | 6.1.1-root.io.26.1.1-root.io.35.3.20-root.io.45.3.23-root.io.45.3.23-root.io.55.3.20-root.io.55.3.23-root.io.66.1.1-root.io.46.1.1-root.io.56.1.1-root.io.65.3.20-root.io.65.3.20-root.io.75.3.20-root.io.8 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-38809 is a medium vulnerability (CVSS 5.3) in Vmware Spring Framework, published September 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.85%, the 58th percentile. Fixed in org.springframework:spring-web 5.3.38.
References
spring.io/security/cve-2024-38809
security.netapp.com/advisory/ntap-20240920-0003
github.com/spring-projects/spring-framework/issues/33372
Show 21 moreShow less
nvd.nist.gov/vuln/detail/CVE-2024-38809
security-tracker.debian.org/tracker/CVE-2024-38809
ubuntu.com/security/CVE-2024-38809
cve.org/CVERecord?id=CVE-2024-38809
Left out here: 377 versions. The JSON record has them. Also not on the record: 145 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 11 source records.