CVE-2025-41242
CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
CVE-2025-41242- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2025-25122
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
EUVD-2025-25122- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r936-gwx5-v52f
Spring Framework MVC Applications Path Traversal Vulnerability
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
GHSA-r936-gwx5-v52f- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
CVE-2025-41242- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-41242
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an embedded Servlet container * the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization * the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
DEBIAN-CVE-2025-41242- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-r936-gwx5-v52f
Spring Framework MVC Applications Path Traversal Vulnerability
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
GHSA-r936-gwx5-v52f- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-67afc831a93ff9cc
Lightwell Security Advisory: spring-webmvc 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-webmvc 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2024-38816, CVE-2024-38819, CVE-2024-38828, CVE-2025-41242, CVE-2026-22735, CVE-2026-22737, CVE-2026-22741, and CVE-2026-22745.
CVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
CVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Specifically, an application is vulnerable when both of the following are true:
- the web application uses RouterFunctions to serve static resources
- resource handling is explicitly configured with a FileSystemResource location
However, malicious requests are blocked and rejected when any of the following is true:
- the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
- the application runs on Tomcat or Jetty
CVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.
CVE-2025-41242: Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
This patched artifact is a drop-in replacement for org.springframework:spring-webmvc 5.3.18 from Maven Central.
- Record
RHLW-2026-67afc831a93ff9cc- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-41242
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an embedded Servlet container * the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization * the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
- Record
UBUNTU-CVE-2025-41242- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1786339580 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.5.
- Record
CLSA-2026-1786339580- Updated
- 2026-11-02
OSVCLSA-2026-1786341592 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.15-tuxcare.2.
- Record
CLSA-2026-1786341592- Updated
- 2026-11-02
OSVCLSA-2026-1786348544 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.27-tuxcare.7.
- Record
CLSA-2026-1786348544- Updated
- 2026-11-02
OSVCLSA-2026-1786369191 No score
TuxCare security update for org.springframework:spring-webmvc (1 CVE)
TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.3.30-tuxcare.6.
- Record
CLSA-2026-1786369191- Updated
- 2026-11-02
OSVCLSA-2026-1786423599 No score
TuxCare security update for org.springframework:spring-webmvc (1 CVE)
TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.5.
- Record
CLSA-2026-1786423599- Updated
- 2026-11-02
OSVCLSA-2026-1786424014 No score
TuxCare security update for org.springframework:spring-webmvc (1 CVE)
TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.3.39-tuxcare.19.
- Record
CLSA-2026-1786424014- Updated
- 2026-11-02
OSVCLSA-2026-1786426050 No score
TuxCare security update for org.springframework:spring-webmvc (1 CVE)
TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 6.1.21-tuxcare.9.
- Record
CLSA-2026-1786426050- Updated
- 2026-11-02
OSVCLSA-2026-1786515016 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786515016- Updated
- 2026-11-02
OSVCLSA-2026-1786534533 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.20-tuxcare.8.
- Record
CLSA-2026-1786534533- Updated
- 2026-11-02
OSVCLSA-2026-1786552823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5.
- Record
CLSA-2026-1786552823- Updated
- 2026-11-02
OSVCLSA-2026-1786555755 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2.
- Record
CLSA-2026-1786555755- Updated
- 2026-11-02
OSVCLSA-2026-1786606429 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.10.
- Record
CLSA-2026-1786606429- Updated
- 2026-11-02
OSVCLSA-2026-1786609421 No score
TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786609421- Updated
- 2026-11-02
OSVCLSA-2026-1786623881 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5.
- Record
CLSA-2026-1786623881- Updated
- 2026-11-02
OSVCLSA-2026-1787070801 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4.
- Record
CLSA-2026-1787070801- Updated
- 2026-11-02
OSVCLSA-2026-1787246263 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 5.3.29-tuxcare.6.
- Record
CLSA-2026-1787246263- Updated
- 2026-11-02
OSVCLSA-2026-1787732821 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.4.
- Record
CLSA-2026-1787732821- Updated
- 2026-11-02
OSVCLSA-2026-1787739491 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 5.3.25-tuxcare.6.
- Record
CLSA-2026-1787739491- Updated
- 2026-11-02
OSVCLSA-2026-1787924349 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.10.
- Record
CLSA-2026-1787924349- Updated
- 2026-11-02
OSVCLSA-2026-1788253370 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.
- Record
CLSA-2026-1788253370- Updated
- 2026-11-02
OSVCLSA-2026-1788282862 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 21 CVEs. Fixed in 6.1.16-tuxcare.3.
- Record
CLSA-2026-1788282862- Updated
- 2026-11-02
OSVCLSA-2026-1788283253 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3.
- Record
CLSA-2026-1788283253- Updated
- 2026-11-02
OSVCLSA-2026-1788287051 No score
TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2.
- Record
CLSA-2026-1788287051- Updated
- 2026-11-02
OSVCLSA-2026-1788341776 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788341776- Updated
- 2026-11-02
OSVCLSA-2026-1788344824 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.
- Record
CLSA-2026-1788344824- Updated
- 2026-11-02
OSVCLSA-2026-1788344832 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.
- Record
CLSA-2026-1788344832- Updated
- 2026-11-02
OSVCLSA-2026-1788346056 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.
- Record
CLSA-2026-1788346056- Updated
- 2026-11-02
OSVCLSA-2026-1788346458 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 12 CVEs. Fixed in 6.0.23-tuxcare.7.
- Record
CLSA-2026-1788346458- Updated
- 2026-11-02
OSVCLSA-2026-1788349142 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 21 CVEs. Fixed in 6.1.4-tuxcare.2.
- Record
CLSA-2026-1788349142- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788361406 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.
- Record
CLSA-2026-1788361406- Updated
- 2026-11-02
OSVCLSA-2026-1788361436 No score
TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 13 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.10.
- Record
CLSA-2026-1788361436- Updated
- 2026-11-02
OSVCLSA-2026-1788363279 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.10.
- Record
CLSA-2026-1788363279- Updated
- 2026-11-02
OSVCLSA-2026-1788372470 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788372470- Updated
- 2026-11-02
OSVCLSA-2026-1788372833 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.
- Record
CLSA-2026-1788372833- Updated
- 2026-11-02
OSVCLSA-2026-1788376116 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788376116- Updated
- 2026-11-02
OSVCLSA-2026-1788377477 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788377477- Updated
- 2026-11-02
OSVCLSA-2026-1788804848 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.
- Record
CLSA-2026-1788804848- Updated
- 2026-11-02
OSVCLSA-2026-1788813738 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788813738- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1789416166 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.5.
- Record
CLSA-2026-1789416166- Updated
- 2026-11-02
OSVCLSA-2026-1789703693 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 6.2.5-tuxcare.1.
- Record
CLSA-2026-1789703693- Updated
- 2026-11-02
OSVCLSA-2026-1790068633 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 6.0.14-tuxcare.1.
- Record
CLSA-2026-1790068633- Updated
- 2026-11-02
OSVCLSA-2026-1790068772 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.
- Record
CLSA-2026-1790068772- Updated
- 2026-11-02
OSVCLSA-2026-1790069169 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.3-tuxcare.1.
- Record
CLSA-2026-1790069169- Updated
- 2026-11-02
OSVCLSA-2026-1790069660 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.
- Record
CLSA-2026-1790069660- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webmvcMaven |
6.2.0 up to 6.2.10 | 6.2.10 |
org.springframework:spring-webmvcMaven |
6.1.0 to 6.1.21 | None known |
org.springframework:spring-webmvcMaven |
6.0.0 to 6.0.29 | None known |
org.springframework:spring-webmvcMaven |
5.3.0 to 5.3.43 | None known |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.24 up to 5.3.24-tuxcare.5, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.4 |
5.3.24-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.24 up to 5.3.24-tuxcare.5, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.4 |
5.3.24-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.27 up to 5.3.27-tuxcare.7, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27-tuxcare.65.3.27.tuxcare.1 |
5.3.27-tuxcare.7 |
Show 213 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.3.27 up to 5.3.27-tuxcare.7, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27-tuxcare.65.3.27.tuxcare.1 |
5.3.27-tuxcare.7 |
org.springframework:spring-webmvcTuxCare:Maven |
5.3.30 up to 5.3.30-tuxcare.6, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.25.3.30-tuxcare.35.3.30-tuxcare.45.3.30-tuxcare.5 |
5.3.30-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.5, plus listed versions 4.3.30.RELEASE-tuxcare.14.3.30.RELEASE-tuxcare.24.3.30.RELEASE-tuxcare.34.3.30.RELEASE-tuxcare.4 |
4.3.30.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven |
5.3.39 up to 5.3.39-tuxcare.19, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 12 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.185.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.19 |
org.springframework:spring-webmvcTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.9, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.26.1.21-tuxcare.36.1.21-tuxcare.46.1.21-tuxcare.56.1.21-tuxcare.66.1.21-tuxcare.76.1.21-tuxcare.8 |
6.1.21-tuxcare.9 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.6, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 |
5.3.29-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.6, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 |
5.3.29-tuxcare.6 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.6, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 |
5.3.29-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.6, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 |
5.3.29-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.6, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 |
5.3.29-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.4, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.3 |
4.3.25.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.4, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.3 |
4.3.25.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.4, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.3 |
4.3.25.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 6 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.4, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.24.3.25.RELEASE-tuxcare.3 |
4.3.25.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.6, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.5 |
5.3.25-tuxcare.6 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.6, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.5 |
5.3.25-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.6, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.5 |
5.3.25-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.6, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.5 |
5.3.25-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
6.0.23 up to 6.0.23-tuxcare.7, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.46.0.23-tuxcare.56.0.23-tuxcare.6 |
6.0.23-tuxcare.7 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
5.3.37 up to 5.3.37-tuxcare.10, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.5 Show 4 moreShow less5.3.37-tuxcare.65.3.37-tuxcare.75.3.37-tuxcare.85.3.37-tuxcare.9 |
5.3.37-tuxcare.10 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 9 CVEs |
5.3.37 up to 5.3.37-tuxcare.10, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.5 Show 4 moreShow less5.3.37-tuxcare.65.3.37-tuxcare.75.3.37-tuxcare.85.3.37-tuxcare.9 |
5.3.37-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
5.3.37 up to 5.3.37-tuxcare.10, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.5 Show 4 moreShow less5.3.37-tuxcare.65.3.37-tuxcare.75.3.37-tuxcare.85.3.37-tuxcare.9 |
5.3.37-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
5.3.37 up to 5.3.37-tuxcare.10, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.5 Show 4 moreShow less5.3.37-tuxcare.65.3.37-tuxcare.75.3.37-tuxcare.85.3.37-tuxcare.9 |
5.3.37-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.4, plus listed versions 5.1.6.RELEASE-tuxcare.15.1.6.RELEASE-tuxcare.25.1.6.RELEASE-tuxcare.3 |
5.1.6.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.4, plus listed versions 5.1.6.RELEASE-tuxcare.15.1.6.RELEASE-tuxcare.25.1.6.RELEASE-tuxcare.3 |
5.1.6.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.4, plus listed versions 5.1.6.RELEASE-tuxcare.15.1.6.RELEASE-tuxcare.25.1.6.RELEASE-tuxcare.3 |
5.1.6.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.4, plus listed versions 5.1.6.RELEASE-tuxcare.15.1.6.RELEASE-tuxcare.25.1.6.RELEASE-tuxcare.3 |
5.1.6.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.5, plus listed versions 5.1.9.RELEASE-tuxcare.15.1.9.RELEASE-tuxcare.25.1.9.RELEASE-tuxcare.35.1.9.RELEASE-tuxcare.4 |
5.1.9.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 7 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.5, plus listed versions 5.1.9.RELEASE-tuxcare.15.1.9.RELEASE-tuxcare.25.1.9.RELEASE-tuxcare.35.1.9.RELEASE-tuxcare.4 |
5.1.9.RELEASE-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.5, plus listed versions 5.1.9.RELEASE-tuxcare.15.1.9.RELEASE-tuxcare.25.1.9.RELEASE-tuxcare.35.1.9.RELEASE-tuxcare.4 |
5.1.9.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.5, plus listed versions 5.1.9.RELEASE-tuxcare.15.1.9.RELEASE-tuxcare.25.1.9.RELEASE-tuxcare.35.1.9.RELEASE-tuxcare.4 |
5.1.9.RELEASE-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-4 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
org.springframework:spring-webmvcMaven |
6.2.0 up to 6.2.10, plus listed versions 6.2.16.2.26.2.36.2.46.2.5 Show 4 moreShow less6.2.66.2.76.2.86.2.9 |
6.2.10 |
org.springframework:spring-webmvcMaven |
6.1.0 to 6.1.21, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 15 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-webmvcMaven |
6.0.0 to 6.0.29, plus listed versions 6.0.16.0.106.0.116.0.126.0.13 Show 18 moreShow less6.0.146.0.156.0.166.0.176.0.186.0.196.0.26.0.206.0.216.0.226.0.236.0.36.0.46.0.56.0.66.0.76.0.86.0.9 |
None known |
org.springframework:spring-webmvcMaven |
5.3.0 to 5.3.43, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 34 moreShow less5.3.145.3.155.3.165.3.175.3.185.3.195.3.25.3.205.3.215.3.225.3.235.3.245.3.255.3.265.3.275.3.285.3.295.3.35.3.305.3.315.3.325.3.335.3.345.3.355.3.365.3.375.3.385.3.395.3.45.3.55.3.65.3.75.3.85.3.9 |
None known |
org.springframework:spring-webmvcRed Hat Lightwell:Maven From an advisory covering 9 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-webmvcRoot:Maven |
before 6.1.13-aikido.4 | 6.1.13-aikido.45.3.20-aikido.36.1.1-aikido.36.2.5-aikido.55.3.20-aikido.46.1.13-aikido.35.3.23-aikido.45.3.23-aikido.55.3.20-aikido.55.3.23-aikido.66.2.5-aikido.66.1.1-aikido.46.1.1-aikido.56.1.1-aikido.65.3.20-aikido.65.3.20-aikido.75.3.20-aikido.8 |
io.root.org.springframework:spring-webmvcRoot:Maven |
before 6.2.5-root.io.3 | 6.2.5-root.io.36.1.13-root.io.46.2.5-root.io.46.2.2-root.io.26.1.1-root.io.25.3.20-root.io.36.1.1-root.io.36.2.5-root.io.55.3.20-root.io.46.1.13-root.io.35.3.23-root.io.45.3.23-root.io.55.3.20-root.io.55.3.23-root.io.66.2.5-root.io.66.1.1-root.io.46.1.1-root.io.56.1.1-root.io.65.3.20-root.io.65.3.20-root.io.75.3.20-root.io.8 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | HORKimhab/CVE-2025-41242 | 2026-05-11 |
| Nuclei | Spring Framework - Path Traversal |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, affected_more, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, Nuclei, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-41242 is a medium vulnerability (CVSS 5.9) in Vmware Spring Framework, published August 18, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. Fixed in org.springframework:spring-webmvc 6.2.10.
References
spring.io/security/cve-2025-41242
nvd.nist.gov/vuln/detail/CVE-2025-41242
github.com/advisories/GHSA-r936-gwx5-v52f
security-tracker.debian.org/tracker/CVE-2025-41242
Show 18 moreShow less
ubuntu.com/security/CVE-2025-41242
cve.org/CVERecord?id=CVE-2025-41242
Left out here: 179 versions. The JSON record has them. Also not on the record: 428 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 41 source records.