CVE-2025-41249
CVE-2025-41249: Spring Framework Annotation Detection Vulnerability
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
CVE-2025-41249: Spring Framework Annotation Detection Vulnerability
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
CVE-2025-41249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-285
- Updated
- 2026-11-02
EUVDEUVD-2025-29537
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
EUVD-2025-29537- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jmp9-x22r-554x
Spring Framework annotation detection mechanism may result in improper authorization
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
GHSA-jmp9-x22r-554x- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-285, CWE-863
- Updated
- 2026-11-02
NVD
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
CVE-2025-41249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-285
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-41249
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature. You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces. This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
DEBIAN-CVE-2025-41249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-jmp9-x22r-554x
Spring Framework annotation detection mechanism may result in improper authorization
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
GHSA-jmp9-x22r-554x- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-285, CWE-863
- Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-25544e781d50b856
Lightwell Security Advisory: spring-expression 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-expression 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2025-41249, CVE-2024-38816, CVE-2024-22243, CVE-2024-38808, CVE-2023-20863, and CVE-2023-20861.
CVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
CVE-2025-41249: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.
Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.
You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.
This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
CVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Specifically, an application is vulnerable when both of the following are true:
- the web application uses RouterFunctions to serve static resources
- resource handling is explicitly configured with a FileSystemResource location
However, malicious requests are blocked and rejected when any of the following is true:
- the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
- the application runs on Tomcat or Jetty
CVE-2024-22243: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
CVE-2024-38808: CVE-2024-38808: Spring Expression DoS Vulnerability
CVE-2023-20863: In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
CVE-2023-20861: In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
This patched artifact is a drop-in replacement for org.springframework:spring-expression 5.3.18 from Maven Central.
- Record
RHLW-2026-25544e781d50b856- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2025-41249
CVE-2025-41249 in org.springframework:spring-core - Patched by Root
Root has patched CVE-2025-41249 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2025-41249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-41249
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature. You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces. This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
- Record
UBUNTU-CVE-2025-41249- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2025-1759190769 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.8.
- Record
CLSA-2025-1759190769- Updated
- 2026-11-02
OSVCLSA-2025-1759795580 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.1.
- Record
CLSA-2025-1759795580- Updated
- 2026-11-02
OSVCLSA-2025-1761696401 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.
- Record
CLSA-2025-1761696401- Updated
- 2026-11-02
OSVCLSA-2025-1762906011 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.
- Record
CLSA-2025-1762906011- Updated
- 2026-11-02
OSVCLSA-2025-1766016492 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.1.
- Record
CLSA-2025-1766016492- Updated
- 2026-11-02
OSVCLSA-2026-1775435427 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.2.
- Record
CLSA-2026-1775435427- Updated
- 2026-11-02
OSVCLSA-2026-1776126823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.
- Record
CLSA-2026-1776126823- Updated
- 2026-11-02
OSVCLSA-2026-1776645365 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 5.3.27-tuxcare.4.
- Record
CLSA-2026-1776645365- Updated
- 2026-11-02
OSVCLSA-2026-1777250292 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 5 CVEs. Fixed in 5.3.25-tuxcare.1.
- Record
CLSA-2026-1777250292- Updated
- 2026-11-02
OSVCLSA-2026-1779324463 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.29-tuxcare.4.
- Record
CLSA-2026-1779324463- Updated
- 2026-11-02
OSVCLSA-2026-1784509762 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.8.
- Record
CLSA-2026-1784509762- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1786515016 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786515016- Updated
- 2026-11-02
OSVCLSA-2026-1786552823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5.
- Record
CLSA-2026-1786552823- Updated
- 2026-11-02
OSVCLSA-2026-1786609421 No score
TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786609421- Updated
- 2026-11-02
OSVCLSA-2026-1787924349 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.10.
- Record
CLSA-2026-1787924349- Updated
- 2026-11-02
OSVCLSA-2026-1787928797 No score
TuxCare security update for org.springframework (15 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 15 CVEs. Fixed in 6.1.20-tuxcare.9.
- Record
CLSA-2026-1787928797- Updated
- 2026-11-02
OSVCLSA-2026-1788253370 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.
- Record
CLSA-2026-1788253370- Updated
- 2026-11-02
OSVCLSA-2026-1788274092 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 20 CVEs. Fixed in 6.1.15-tuxcare.4.
- Record
CLSA-2026-1788274092- Updated
- 2026-11-02
OSVCLSA-2026-1788282862 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 21 CVEs. Fixed in 6.1.16-tuxcare.3.
- Record
CLSA-2026-1788282862- Updated
- 2026-11-02
OSVCLSA-2026-1788283253 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3.
- Record
CLSA-2026-1788283253- Updated
- 2026-11-02
OSVCLSA-2026-1788287051 No score
TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2.
- Record
CLSA-2026-1788287051- Updated
- 2026-11-02
OSVCLSA-2026-1788341776 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788341776- Updated
- 2026-11-02
OSVCLSA-2026-1788342969 No score
TuxCare security update for org.springframework (19 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 19 CVEs. Fixed in 6.1.7-tuxcare.3.
- Record
CLSA-2026-1788342969- Updated
- 2026-11-02
OSVCLSA-2026-1788349142 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 21 CVEs. Fixed in 6.1.4-tuxcare.2.
- Record
CLSA-2026-1788349142- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788361436 No score
TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 13 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.10.
- Record
CLSA-2026-1788361436- Updated
- 2026-11-02
OSVCLSA-2026-1788804848 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.
- Record
CLSA-2026-1788804848- Updated
- 2026-11-02
OSVCLSA-2026-1788813738 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788813738- Updated
- 2026-11-02
OSVCLSA-2026-1788865685 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5.
- Record
CLSA-2026-1788865685- Updated
- 2026-11-02
OSVCLSA-2026-1789416166 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.5.
- Record
CLSA-2026-1789416166- Updated
- 2026-11-02
OSVCLSA-2026-1789425190 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.9.
- Record
CLSA-2026-1789425190- Updated
- 2026-11-02
OSVCLSA-2026-1790068772 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.
- Record
CLSA-2026-1790068772- Updated
- 2026-11-02
OSVCLSA-2026-1790069169 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.3-tuxcare.1.
- Record
CLSA-2026-1790069169- Updated
- 2026-11-02
OSVCLSA-2026-1790069660 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.
- Record
CLSA-2026-1790069660- Updated
- 2026-11-02
OSVCLSA-2026-1790069975 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.
- Record
CLSA-2026-1790069975- Updated
- 2026-11-02
OSVCLSA-2026-1790070464 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.
- Record
CLSA-2026-1790070464- Updated
- 2026-11-02
OSVCLSA-2026-1790070671 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 5.3.33-tuxcare.1.
- Record
CLSA-2026-1790070671- Updated
- 2026-11-02
OSVCLSA-2026-1790074038 No score
TuxCare security update for org.springframework (30 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4.
- Record
CLSA-2026-1790074038- Updated
- 2026-11-02
OSVCLSA-2026-1790074384 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.
- Record
CLSA-2026-1790074384- Updated
- 2026-11-02
OSVCLSA-2026-1790080806 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.2.5-tuxcare.2.
- Record
CLSA-2026-1790080806- Updated
- 2026-11-02
OSVCLSA-2026-1790878884 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790878884- Updated
- 2026-11-02
OSVCLSA-2026-1791213084 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791213084- Updated
- 2026-11-02
OSVCLSA-2026-1791218458 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218458- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-coreMaven |
5.3.0 to 5.3.44 | None known |
org.springframework:spring-coreMaven |
6.0.0 to 6.1.22 | None known |
org.springframework:spring-coreMaven |
6.2.0 to 6.2.10 | 6.2.11 |
org.springframework:spring-beansTuxCare:Maven |
5.3.39 up to 5.3.39-tuxcare.8, plus listed versions 5.3.39-tuxcare.75.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.8 |
org.springframework:spring-coreTuxCare:Maven |
5.3.39 up to 5.3.39-tuxcare.8, plus listed versions 5.3.39-tuxcare.75.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.1 | 6.1.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.1 | 6.1.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
Show 212 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.2, plus listed versions 5.3.37-tuxcare.1 |
5.3.37-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.2, plus listed versions 5.3.37-tuxcare.1 |
5.3.37-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.2, plus listed versions 5.3.37-tuxcare.1 |
5.3.37-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.2, plus listed versions 5.3.37-tuxcare.1 |
5.3.37-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven |
5.3.27 up to 5.3.27-tuxcare.4, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27.tuxcare.1 |
5.3.27-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven |
5.3.27 up to 5.3.27-tuxcare.4, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27.tuxcare.1 |
5.3.27-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.10, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.5 Show 4 moreShow less4.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.74.2.9.RELEASE-tuxcare.84.2.9.RELEASE-tuxcare.9 |
4.2.9.RELEASE-tuxcare.10 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 15 CVEs |
6.1.20 up to 6.1.20-tuxcare.9, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.8 |
6.1.20-tuxcare.9 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.1.15 up to 6.1.15-tuxcare.4, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.3 |
6.1.15-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.16 up to 6.1.16-tuxcare.3, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.2 |
6.1.16-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 19 CVEs |
6.1.7 up to 6.1.7-tuxcare.3, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.2 |
6.1.7-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 13 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.10, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.5 Show 4 moreShow less5.2.13.RELEASE-tuxcare.65.2.13.RELEASE-tuxcare.75.2.13.RELEASE-tuxcare.85.2.13.RELEASE-tuxcare.9 |
5.2.13.RELEASE-tuxcare.10 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.6, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.45.0.5.RELEASE-tuxcare.5 |
5.0.5.RELEASE-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 8 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.5, plus listed versions 5.0.13.RELEASE-tuxcare.15.0.13.RELEASE-tuxcare.25.0.13.RELEASE-tuxcare.35.0.13.RELEASE-tuxcare.4 |
5.0.13.RELEASE-tuxcare.5 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-4 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
org.springframework:spring-coreMaven |
5.3.0 to 5.3.44, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 34 moreShow less5.3.145.3.155.3.165.3.175.3.185.3.195.3.25.3.205.3.215.3.225.3.235.3.245.3.255.3.265.3.275.3.285.3.295.3.35.3.305.3.315.3.325.3.335.3.345.3.355.3.365.3.375.3.385.3.395.3.45.3.55.3.65.3.75.3.85.3.9 |
None known |
org.springframework:spring-coreMaven |
6.0.0 to 6.1.22, plus listed versions 6.0.16.0.106.0.116.0.126.0.13 Show 40 moreShow less6.0.146.0.156.0.166.0.176.0.186.0.196.0.26.0.206.0.216.0.226.0.236.0.36.0.46.0.56.0.66.0.76.0.86.0.96.1.06.1.16.1.106.1.116.1.126.1.136.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.216.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-coreMaven |
6.2.0 up to 6.2.11, plus listed versions 6.2.16.2.106.2.26.2.36.2.4 Show 5 moreShow less6.2.56.2.66.2.76.2.86.2.9 |
6.2.11 |
org.springframework:spring-expressionRed Hat Lightwell:Maven From an advisory covering 7 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 3.0.0.RELEASE3.0.1.RELEASE3.0.2.RELEASE3.0.3.RELEASE3.0.4.RELEASE Show 45 moreShow less3.0.5.RELEASE3.0.6.RELEASE3.0.7.RELEASE3.1.0.RELEASE3.1.1.RELEASE3.1.2.RELEASE3.1.3.RELEASE3.1.4.RELEASE3.2.0.RELEASE3.2.1.RELEASE3.2.10.RELEASE3.2.11.RELEASE3.2.12.RELEASE3.2.13.RELEASE3.2.14.RELEASE3.2.15.RELEASE3.2.16.RELEASE3.2.17.RELEASE3.2.18.RELEASE3.2.2.RELEASE3.2.3.RELEASE3.2.4.RELEASE3.2.5.RELEASE3.2.6.RELEASE3.2.7.RELEASE3.2.8.RELEASE3.2.9.RELEASE4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-coreRed Hat Lightwell:Maven |
before 5.3.18.rhlw-00010, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-coreRoot:Maven |
before 5.3.14-aikido.4 | 5.3.14-aikido.46.1.21-aikido.35.3.31-aikido.46.2.7-aikido.26.2.2-aikido.65.3.27-aikido.26.1.13-aikido.46.2.6-aikido.15.3.20-aikido.36.1.20-aikido.66.0.0-aikido.46.2.0-aikido.26.1.13-aikido.26.1.6-aikido.26.2.2-aikido.36.1.1-aikido.36.2.5-aikido.55.3.31-aikido.36.2.2-aikido.45.3.20-aikido.46.1.13-aikido.35.3.27-aikido.16.1.0-aikido.16.0.11-aikido.76.2.2-aikido.55.3.14-aikido.35.3.20-aikido.56.2.5-aikido.66.1.1-aikido.46.1.1-aikido.55.3.31-aikido.56.1.1-aikido.65.3.20-aikido.65.3.14-aikido.55.3.14-aikido.66.1.21-aikido.45.3.31-aikido.65.3.20-aikido.75.3.14-aikido.76.1.11-aikido.55.3.20-aikido.85.3.14-aikido.8 |
io.root.org.springframework:spring-coreRoot:Maven |
before 6.1.20-root.io.1 | 6.1.20-root.io.16.1.20-root.io.46.0.0-root.io.16.0.0-root.io.26.0.11-root.io.16.0.11-root.io.26.0.11-root.io.56.2.5-root.io.16.0.0-root.io.36.2.5-root.io.26.0.11-root.io.66.1.20-root.io.56.2.5-root.io.35.3.14-root.io.46.1.1-root.io.16.1.21-root.io.35.3.31-root.io.46.2.2-root.io.16.1.13-root.io.16.2.0-root.io.16.2.7-root.io.26.2.2-root.io.65.3.27-root.io.26.1.13-root.io.46.2.5-root.io.45.3.20-root.io.26.2.6-root.io.16.2.2-root.io.26.1.6-root.io.15.3.31-root.io.16.1.1-root.io.25.3.20-root.io.35.3.31-root.io.26.1.20-root.io.66.0.0-root.io.46.2.0-root.io.26.1.13-root.io.26.1.6-root.io.26.2.2-root.io.36.1.1-root.io.36.2.5-root.io.55.3.31-root.io.36.2.2-root.io.45.3.20-root.io.46.1.13-root.io.35.3.27-root.io.16.1.0-root.io.16.0.11-root.io.76.2.2-root.io.55.3.14-root.io.35.3.20-root.io.56.2.5-root.io.66.1.1-root.io.46.1.1-root.io.55.3.31-root.io.56.1.1-root.io.65.3.20-root.io.65.3.14-root.io.55.3.14-root.io.66.1.21-root.io.45.3.31-root.io.65.3.20-root.io.75.3.14-root.io.76.1.11-root.io.55.3.20-root.io.85.3.14-root.io.8 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | edwin/simulating-cve-2025-41249 | 2026-10-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| affected, affected_more | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-41249 is a high vulnerability (CVSS 7.5) in Vmware Spring Framework, published September 16, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in org.springframework:spring-core 6.2.11.
References
spring.io/security/cve-2025-41249
nvd.nist.gov/vuln/detail/CVE-2025-41249
github.com/spring-projects/spring-framework/issues/35342
Show 26 moreShow less
security-tracker.debian.org/tracker/CVE-2025-41249
ubuntu.com/security/CVE-2025-41249
cve.org/CVERecord?id=CVE-2025-41249
Left out here: 309 versions. The JSON record has them. Also not on the record: 319 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 27 source records.