CVE-2025-41254
Spring Framework STOMP CSRF Vulnerability
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and VersionsSpring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
MitigationUsers of affected versions should upgrade to the corresponding fixed version.
Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Spring Framework STOMP CSRF Vulnerability
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and VersionsSpring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
MitigationUsers of affected versions should upgrade to the corresponding fixed version.
Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
CVE-2025-41254- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
EUVDEUVD-2025-34768
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and VersionsSpring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
MitigationUsers of affected versions should upgrade to the corresponding fixed version.
Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
EUVD-2025-34768- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7fch-4f2f-jcgm
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and Versions
Spring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
Mitigation
Users of affected versions should upgrade to the corresponding fixed version.
Affected version(s)
Fix version | Availability -|- 6.2.x | 6.2.12 OSS 6.1.x | 6.1.24 Commercial https://enterprise.spring.io/ 6.0.x | N/A Out of support https://spring.io/projects/spring-framework#support 5.3.x | 5.3.46 Commercial https://enterprise.spring.io/
No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
GHSA-7fch-4f2f-jcgm- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
NVD
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and VersionsSpring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
MitigationUsers of affected versions should upgrade to the corresponding fixed version.
Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
CVE-2025-41254- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-41254
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 - 6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older, unsupported versions are also affected. MitigationUsers of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary. CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
DEBIAN-CVE-2025-41254- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVGHSA-7fch-4f2f-jcgm
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages.
Affected Spring Products and Versions
Spring Framework:
- 6.2.0 - 6.2.11
- 6.1.0 - 6.1.23
- 6.0.x - 6.0.29
- 5.3.0 - 5.3.45
- Older, unsupported versions are also affected.
Mitigation
Users of affected versions should upgrade to the corresponding fixed version.
Affected version(s)
Fix version | Availability -|- 6.2.x | 6.2.12 OSS 6.1.x | 6.1.24 Commercial https://enterprise.spring.io/ 6.0.x | N/A Out of support https://spring.io/projects/spring-framework#support 5.3.x | 5.3.46 Commercial https://enterprise.spring.io/
No further mitigation steps are necessary.
CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
GHSA-7fch-4f2f-jcgm- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
Show 48 moreShow less
OSVUBUNTU-CVE-2025-41254
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 - 6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older, unsupported versions are also affected. MitigationUsers of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix versionAvailability6.2.x6.2.12OSS6.1.x6.1.24 Commercial https://enterprise.spring.io/ 6.0.xN/A Out of support https://spring.io/projects/spring-framework#support 5.3.x5.3.46 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary. CreditThis vulnerability was discovered and responsibly reported by Jannis Kaiser.
- Record
UBUNTU-CVE-2025-41254- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVCLSA-2025-1761523598 No score
TuxCare security update for org.springframework:spring-websocket (1 CVE)
TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 5.3.39-tuxcare.9.
- Record
CLSA-2025-1761523598- Updated
- 2026-11-02
OSVCLSA-2025-1761523599 No score
TuxCare security update for org.springframework:spring-websocket (1 CVE)
TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 6.1.21-tuxcare.2.
- Record
CLSA-2025-1761523599- Updated
- 2026-11-02
OSVCLSA-2025-1761696401 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.
- Record
CLSA-2025-1761696401- Updated
- 2026-11-02
OSVCLSA-2025-1762906011 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.
- Record
CLSA-2025-1762906011- Updated
- 2026-11-02
OSVCLSA-2025-1765930087 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3.
- Record
CLSA-2025-1765930087- Updated
- 2026-11-02
OSVCLSA-2025-1766016492 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.1.
- Record
CLSA-2025-1766016492- Updated
- 2026-11-02
OSVCLSA-2025-1766534902 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.27-tuxcare.2.
- Record
CLSA-2025-1766534902- Updated
- 2026-11-02
OSVCLSA-2026-1773015249 No score
TuxCare security update for org.springframework:spring-websocket (1 CVE)
TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.2.
- Record
CLSA-2026-1773015249- Updated
- 2026-11-02
OSVCLSA-2026-1774311639 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1774311639- Updated
- 2026-11-02
OSVCLSA-2026-1774916751 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1.
- Record
CLSA-2026-1774916751- Updated
- 2026-11-02
OSVCLSA-2026-1775003159 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.2.
- Record
CLSA-2026-1775003159- Updated
- 2026-11-02
OSVCLSA-2026-1776126823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.
- Record
CLSA-2026-1776126823- Updated
- 2026-11-02
OSVCLSA-2026-1776213242 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.
- Record
CLSA-2026-1776213242- Updated
- 2026-11-02
OSVCLSA-2026-1777250292 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 5 CVEs. Fixed in 5.3.25-tuxcare.1.
- Record
CLSA-2026-1777250292- Updated
- 2026-11-02
OSVCLSA-2026-1777941826 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.
- Record
CLSA-2026-1777941826- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1785935276 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785935276- Updated
- 2026-11-02
OSVCLSA-2026-1785957138 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785957138- Updated
- 2026-11-02
OSVCLSA-2026-1786341592 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.15-tuxcare.2.
- Record
CLSA-2026-1786341592- Updated
- 2026-11-02
OSVCLSA-2026-1786342108 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3.
- Record
CLSA-2026-1786342108- Updated
- 2026-11-02
OSVCLSA-2026-1786515016 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786515016- Updated
- 2026-11-02
OSVCLSA-2026-1786555755 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2.
- Record
CLSA-2026-1786555755- Updated
- 2026-11-02
OSVCLSA-2026-1786573855 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.8.
- Record
CLSA-2026-1786573855- Updated
- 2026-11-02
OSVCLSA-2026-1786601101 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.5.
- Record
CLSA-2026-1786601101- Updated
- 2026-11-02
OSVCLSA-2026-1786604803 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 6 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.5.
- Record
CLSA-2026-1786604803- Updated
- 2026-11-02
OSVCLSA-2026-1786609421 No score
TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786609421- Updated
- 2026-11-02
OSVCLSA-2026-1786609560 No score
TuxCare security update for org.grails (18 CVEs)
TuxCare rebuilt 33 org.grails packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1786609560- Updated
- 2026-11-02
OSVCLSA-2026-1787313469 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3.
- Record
CLSA-2026-1787313469- Updated
- 2026-11-02
OSVCLSA-2026-1787726627 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 6.1.13-tuxcare.1.
- Record
CLSA-2026-1787726627- Updated
- 2026-11-02
OSVCLSA-2026-1788253370 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.
- Record
CLSA-2026-1788253370- Updated
- 2026-11-02
OSVCLSA-2026-1788349142 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 21 CVEs. Fixed in 6.1.4-tuxcare.2.
- Record
CLSA-2026-1788349142- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788372470 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788372470- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1789427454 No score
TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1789427454- Updated
- 2026-11-02
OSVCLSA-2026-1790089638 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1.
- Record
CLSA-2026-1790089638- Updated
- 2026-11-02
OSVCLSA-2026-1790157664 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790157664- Updated
- 2026-11-02
OSVCLSA-2026-1790878884 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790878884- Updated
- 2026-11-02
OSVCLSA-2026-1790970183 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790970183- Updated
- 2026-11-02
OSVCLSA-2026-1790970528 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790970528- Updated
- 2026-11-02
OSVCLSA-2026-1791107509 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791107509- Updated
- 2026-11-02
OSVCLSA-2026-1791213084 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791213084- Updated
- 2026-11-02
OSVCLSA-2026-1791218458 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218458- Updated
- 2026-11-02
OSVCLSA-2026-1791218487 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218487- Updated
- 2026-11-02
OSVCLSA-2026-1791280407 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.20-tuxcare.12.
- Record
CLSA-2026-1791280407- Updated
- 2026-11-02
OSVCLSA-2026-1791280908 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 10 CVEs. Fixed in 6.0.23-tuxcare.11.
- Record
CLSA-2026-1791280908- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-websocketMaven |
6.2.0 up to 6.2.12 | 6.2.12 |
org.springframework:spring-websocketMaven |
6.1.0 to 6.1.21 | None known |
org.springframework:spring-websocketMaven |
6.0.0 to 6.0.23 | None known |
org.springframework:spring-websocketMaven |
through 5.3.39 | None known |
org.springframework:spring-websocketTuxCare:Maven |
5.3.39 up to 5.3.39-tuxcare.9, plus listed versions 5.3.39-tuxcare.75.3.39-tuxcare.85.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.9 |
org.springframework:spring-websocketTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.2, plus listed versions 6.1.21-tuxcare.1 |
6.1.21-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
Show 213 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.31 up to 5.3.31-tuxcare.1, plus listed versions 5.3.31.tuxcare |
5.3.31-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 12 CVEs |
5.3.30 up to 5.3.30-tuxcare.1 | 5.3.30-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
5.3.29 up to 5.3.29-tuxcare.3, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.2 |
5.3.29-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
5.3.29 up to 5.3.29-tuxcare.3, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.2 |
5.3.29-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.29 up to 5.3.29-tuxcare.3, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.2 |
5.3.29-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.29 up to 5.3.29-tuxcare.3, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.2 |
5.3.29-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
5.3.29 up to 5.3.29-tuxcare.3, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.2 |
5.3.29-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
6.0.16 up to 6.0.16-tuxcare.1 | 6.0.16-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
5.3.27 up to 5.3.27-tuxcare.2, plus listed versions 5.3.27.tuxcare.1 |
5.3.27-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.27 up to 5.3.27-tuxcare.2, plus listed versions 5.3.27.tuxcare.1 |
5.3.27-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.27 up to 5.3.27-tuxcare.2, plus listed versions 5.3.27.tuxcare.1 |
5.3.27-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
5.3.27 up to 5.3.27-tuxcare.2, plus listed versions 5.3.27.tuxcare.1 |
5.3.27-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.2, plus listed versions 4.3.30.RELEASE-tuxcare.1 |
4.3.30.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.2, plus listed versions 4.0.0.RELEASE-tuxcare.1 |
4.0.0.RELEASE-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 3 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.2, plus listed versions 4.0.0.RELEASE-tuxcare.1 |
4.0.0.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.2, plus listed versions 4.0.0.RELEASE-tuxcare.1 |
4.0.0.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.3.24 up to 5.3.24-tuxcare.1 | 5.3.24-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.3.25 up to 5.3.25-tuxcare.1 | 5.3.25-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.2, plus listed versions 4.3.25.RELEASE-tuxcare.1 |
4.3.25.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.2, plus listed versions 4.3.25.RELEASE-tuxcare.1 |
4.3.25.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.2, plus listed versions 4.3.25.RELEASE-tuxcare.1 |
4.3.25.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.2, plus listed versions 4.3.25.RELEASE-tuxcare.1 |
4.3.25.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
6.1.15 up to 6.1.15-tuxcare.2, plus listed versions 6.1.15-tuxcare.1 |
6.1.15-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.3, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.2 |
4.3.9.RELEASE-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.3, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.2 |
4.3.4.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.4, plus listed versions 5.2.0.RELEASE-tuxcare.15.2.0.RELEASE-tuxcare.25.2.0.RELEASE-tuxcare.3 |
5.2.0.RELEASE-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-4 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
org.springframework:spring-websocketMaven |
6.2.0 up to 6.2.12, plus listed versions 6.2.16.2.106.2.116.2.26.2.3 Show 6 moreShow less6.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.12 |
org.springframework:spring-websocketMaven |
6.1.0 to 6.1.21, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 15 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-websocketMaven |
6.0.0 to 6.0.23, plus listed versions 6.0.16.0.106.0.116.0.126.0.13 Show 17 moreShow less6.0.146.0.156.0.166.0.176.0.186.0.196.0.26.0.206.0.216.0.226.0.36.0.46.0.56.0.66.0.76.0.86.0.9 |
None known |
org.springframework:spring-websocketMaven |
through 5.3.39, plus listed versions 4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE Show 45 moreShow less4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE4.1.8.RELEASE4.1.9.RELEASE4.2.0.RELEASE4.2.1.RELEASE4.2.2.RELEASE4.2.3.RELEASE4.2.4.RELEASE4.2.5.RELEASE4.2.6.RELEASE4.2.7.RELEASE4.2.8.RELEASE4.2.9.RELEASE4.3.0.RELEASE4.3.1.RELEASE4.3.10.RELEASE4.3.11.RELEASE4.3.12.RELEASE4.3.13.RELEASE4.3.14.RELEASE4.3.15.RELEASE4.3.16.RELEASE4.3.17.RELEASE4.3.18.RELEASE4.3.19.RELEASE4.3.2.RELEASE4.3.20.RELEASE4.3.21.RELEASE4.3.22.RELEASE4.3.23.RELEASE4.3.24.RELEASE4.3.25.RELEASE4.3.26.RELEASE |
None known |
org.springframework:spring-websocketRed Hat Lightwell:Maven From an advisory covering 2 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 4.0.0.RELEASE4.0.1.RELEASE4.0.2.RELEASE4.0.3.RELEASE4.0.4.RELEASE Show 45 moreShow less4.0.5.RELEASE4.0.6.RELEASE4.0.7.RELEASE4.0.8.RELEASE4.0.9.RELEASE4.1.0.RELEASE4.1.1.RELEASE4.1.2.RELEASE4.1.3.RELEASE4.1.4.RELEASE4.1.5.RELEASE4.1.6.RELEASE4.1.7.RELEASE4.1.8.RELEASE4.1.9.RELEASE4.2.0.RELEASE4.2.1.RELEASE4.2.2.RELEASE4.2.3.RELEASE4.2.4.RELEASE4.2.5.RELEASE4.2.6.RELEASE4.2.7.RELEASE4.2.8.RELEASE4.2.9.RELEASE4.3.0.RELEASE4.3.1.RELEASE4.3.10.RELEASE4.3.11.RELEASE4.3.12.RELEASE4.3.13.RELEASE4.3.14.RELEASE4.3.15.RELEASE4.3.16.RELEASE4.3.17.RELEASE4.3.18.RELEASE4.3.19.RELEASE4.3.2.RELEASE4.3.20.RELEASE4.3.21.RELEASE4.3.22.RELEASE4.3.23.RELEASE4.3.24.RELEASE4.3.25.RELEASE4.3.26.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-websocketRoot:Maven |
before 6.1.13-aikido.4 | 6.1.13-aikido.46.1.1-aikido.36.1.13-aikido.36.1.1-aikido.46.1.1-aikido.56.1.1-aikido.6 |
io.root.org.springframework:spring-websocketRoot:Maven |
before 6.1.13-root.io.4 | 6.1.13-root.io.46.1.1-root.io.26.1.1-root.io.36.1.13-root.io.36.1.1-root.io.46.1.1-root.io.56.1.1-root.io.6 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| affected, affected_more | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-41254 is a medium vulnerability (CVSS 4.3) in Vmware Spring Framework, published October 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in org.springframework:spring-websocket 6.2.12.
References
spring.io/security/cve/2025-41254
nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N&version=3.1
github.com/advisories/GHSA-7fch-4f2f-jcgm
security-tracker.debian.org/tracker/CVE-2025-41254
ubuntu.com/security/CVE-2025-41254
cve.org/CVERecord?id=CVE-2025-41254
Left out here: 216 versions. The JSON record has them. Also not on the record: 279 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 31 source records.