CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Spring Framework DoS with Multipart Temp Files in WebFlux
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
- Record
CVE-2026-22740- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2026-26205
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
- Record
EUVD-2026-26205- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5843-p793-ghmm
Spring Framework DoS with Multipart Temp Files in WebFlux
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
- Record
GHSA-5843-p793-ghmm- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
- Record
CVE-2026-22740- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-22740
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.
- Record
DEBIAN-CVE-2026-22740- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-5843-p793-ghmm
Spring Framework DoS with Multipart Temp Files in WebFlux
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.
Older, unsupported versions are also affected.
- Record
GHSA-5843-p793-ghmm- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
Show 48 moreShow less
OSVUBUNTU-CVE-2026-22740
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.
- Record
UBUNTU-CVE-2026-22740- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1777509594 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.1.21-tuxcare.3.
- Record
CLSA-2026-1777509594- Updated
- 2026-11-02
OSVCLSA-2026-1777509595 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 5.3.39-tuxcare.10.
- Record
CLSA-2026-1777509595- Updated
- 2026-11-02
OSVCLSA-2026-1777509597 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.20-tuxcare.2.
- Record
CLSA-2026-1777509597- Updated
- 2026-11-02
OSVCLSA-2026-1778201086 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.0.23-tuxcare.2.
- Record
CLSA-2026-1778201086- Updated
- 2026-11-02
OSVCLSA-2026-1778460300 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.0.16-tuxcare.2.
- Record
CLSA-2026-1778460300- Updated
- 2026-11-02
OSVCLSA-2026-1778719545 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.4.
- Record
CLSA-2026-1778719545- Updated
- 2026-11-02
OSVCLSA-2026-1779151614 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 5.3.30-tuxcare.2.
- Record
CLSA-2026-1779151614- Updated
- 2026-11-02
OSVCLSA-2026-1779324463 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.29-tuxcare.4.
- Record
CLSA-2026-1779324463- Updated
- 2026-11-02
OSVCLSA-2026-1780361402 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 5.3.31-tuxcare.3.
- Record
CLSA-2026-1780361402- Updated
- 2026-11-02
OSVCLSA-2026-1781052747 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 5.3.27-tuxcare.5.
- Record
CLSA-2026-1781052747- Updated
- 2026-11-02
OSVCLSA-2026-1781657700 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.25-tuxcare.3.
- Record
CLSA-2026-1781657700- Updated
- 2026-11-02
OSVCLSA-2026-1783299707 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.7-tuxcare.4.
- Record
CLSA-2026-1783299707- Updated
- 2026-11-02
OSVCLSA-2026-1784509765 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.24-tuxcare.4.
- Record
CLSA-2026-1784509765- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1785952964 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3.
- Record
CLSA-2026-1785952964- Updated
- 2026-11-02
OSVCLSA-2026-1787120099 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.2.1-tuxcare.2.
- Record
CLSA-2026-1787120099- Updated
- 2026-11-02
OSVCLSA-2026-1787728788 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.2.13-tuxcare.1.
- Record
CLSA-2026-1787728788- Updated
- 2026-11-02
OSVCLSA-2026-1787867848 No score
TuxCare security update for org.grails (1 CVE)
TuxCare rebuilt 33 org.grails packages to address 1 CVE. Fixed in 6.2.1-tuxcare.2.
- Record
CLSA-2026-1787867848- Updated
- 2026-11-02
OSVCLSA-2026-1788283253 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3.
- Record
CLSA-2026-1788283253- Updated
- 2026-11-02
OSVCLSA-2026-1788344824 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.
- Record
CLSA-2026-1788344824- Updated
- 2026-11-02
OSVCLSA-2026-1788344832 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.
- Record
CLSA-2026-1788344832- Updated
- 2026-11-02
OSVCLSA-2026-1788346056 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.
- Record
CLSA-2026-1788346056- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788372833 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.
- Record
CLSA-2026-1788372833- Updated
- 2026-11-02
OSVCLSA-2026-1788876797 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.15-tuxcare.5.
- Record
CLSA-2026-1788876797- Updated
- 2026-11-02
OSVCLSA-2026-1789703693 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 6.2.5-tuxcare.1.
- Record
CLSA-2026-1789703693- Updated
- 2026-11-02
OSVCLSA-2026-1789722420 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1.
- Record
CLSA-2026-1789722420- Updated
- 2026-11-02
OSVCLSA-2026-1790068633 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 6.0.14-tuxcare.1.
- Record
CLSA-2026-1790068633- Updated
- 2026-11-02
OSVCLSA-2026-1790068772 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.
- Record
CLSA-2026-1790068772- Updated
- 2026-11-02
OSVCLSA-2026-1790068919 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 33 CVEs. Fixed in 6.2.14-tuxcare.1.
- Record
CLSA-2026-1790068919- Updated
- 2026-11-02
OSVCLSA-2026-1790070167 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.3.32-tuxcare.1.
- Record
CLSA-2026-1790070167- Updated
- 2026-11-02
OSVCLSA-2026-1790070671 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 5.3.33-tuxcare.1.
- Record
CLSA-2026-1790070671- Updated
- 2026-11-02
OSVCLSA-2026-1790071189 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.
- Record
CLSA-2026-1790071189- Updated
- 2026-11-02
OSVCLSA-2026-1790074038 No score
TuxCare security update for org.springframework (30 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4.
- Record
CLSA-2026-1790074038- Updated
- 2026-11-02
OSVCLSA-2026-1790074384 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.
- Record
CLSA-2026-1790074384- Updated
- 2026-11-02
OSVCLSA-2026-1790079815 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.0.0-tuxcare.4.
- Record
CLSA-2026-1790079815- Updated
- 2026-11-02
OSVCLSA-2026-1790080835 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.13-tuxcare.3.
- Record
CLSA-2026-1790080835- Updated
- 2026-11-02
OSVCLSA-2026-1790080840 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.14-tuxcare.2.
- Record
CLSA-2026-1790080840- Updated
- 2026-11-02
OSVCLSA-2026-1790081647 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.1.16-tuxcare.6.
- Record
CLSA-2026-1790081647- Updated
- 2026-11-02
OSVCLSA-2026-1790878884 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790878884- Updated
- 2026-11-02
OSVCLSA-2026-1790970183 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790970183- Updated
- 2026-11-02
OSVCLSA-2026-1792575333 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792575333- Updated
- 2026-11-02
OSVCLSA-2026-1792590675 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.7-tuxcare.1.
- Record
CLSA-2026-1792590675- Updated
- 2026-11-02
OSVCLSA-2026-1792601509 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.7.
- Record
CLSA-2026-1792601509- Updated
- 2026-11-02
OSVCLSA-2026-1792601600 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 5.2.15.RELEASE-tuxcare.2.
- Record
CLSA-2026-1792601600- Updated
- 2026-11-02
OSVCLSA-2026-1792601847 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.5-tuxcare.2.
- Record
CLSA-2026-1792601847- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webfluxMaven |
7.0.0 to 7.0.6 | 7.0.7 |
org.springframework:spring-webfluxMaven |
6.2.0 to 6.2.17 | 6.2.18 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.26 | None known |
org.springframework:spring-webfluxMaven |
through 5.3.47 | None known |
org.springframework:spring-webfluxTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.3, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.2 |
6.1.21-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven |
5.3.39 up to 5.3.39-tuxcare.10, plus listed versions 5.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.1.20 up to 6.1.20-tuxcare.2, plus listed versions 6.1.20-tuxcare.1 |
6.1.20-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
6.1.20 up to 6.1.20-tuxcare.2, plus listed versions 6.1.20-tuxcare.1 |
6.1.20-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 4 CVEs |
6.0.23 up to 6.0.23-tuxcare.2, plus listed versions 6.0.23-tuxcare.1 |
6.0.23-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
6.0.23 up to 6.0.23-tuxcare.2, plus listed versions 6.0.23-tuxcare.1 |
6.0.23-tuxcare.2 |
Show 213 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
6.0.23 up to 6.0.23-tuxcare.2, plus listed versions 6.0.23-tuxcare.1 |
6.0.23-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
6.0.23 up to 6.0.23-tuxcare.2, plus listed versions 6.0.23-tuxcare.1 |
6.0.23-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven |
6.0.16 up to 6.0.16-tuxcare.2, plus listed versions 6.0.16-tuxcare.1 |
6.0.16-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.4, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.3 |
5.3.37-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.37 up to 5.3.37-tuxcare.4, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.3 |
5.3.37-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven |
5.3.30 up to 5.3.30-tuxcare.2, plus listed versions 5.3.30-tuxcare.1 |
5.3.30-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.29 up to 5.3.29-tuxcare.4, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.3 |
5.3.29-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven |
5.3.31 up to 5.3.31-tuxcare.3, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31.tuxcare |
5.3.31-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven |
5.3.27 up to 5.3.27-tuxcare.5, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27.tuxcare.1 |
5.3.27-tuxcare.5 |
org.springframework:springTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.25 up to 5.3.25-tuxcare.3, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.2 |
5.3.25-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
5.3.7 up to 5.3.7-tuxcare.4, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.3 |
5.3.7-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
5.3.7 up to 5.3.7-tuxcare.4, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.3 |
5.3.7-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
5.3.7 up to 5.3.7-tuxcare.4, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.3 |
5.3.7-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven |
6.2.1 up to 6.2.1-tuxcare.2, plus listed versions 6.2.1-tuxcare.1 |
6.2.1-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.1.15 up to 6.1.15-tuxcare.5, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.36.1.15-tuxcare.4 |
6.1.15-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
6.1.15 up to 6.1.15-tuxcare.5, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.36.1.15-tuxcare.4 |
6.1.15-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.32 up to 5.3.32-tuxcare.1 | 5.3.32-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
5.3.33 up to 5.3.33-tuxcare.1 | 5.3.33-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 30 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.4, plus listed versions 5.1.5.RELEASE-tuxcare.15.1.5.RELEASE-tuxcare.25.1.5.RELEASE-tuxcare.3 |
5.1.5.RELEASE-tuxcare.4 |
org.springframework:springTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
org.springframework:spring-webfluxMaven |
7.0.0 up to 7.0.7, plus listed versions 7.0.17.0.27.0.37.0.47.0.57.0.6 |
7.0.7 |
org.springframework:spring-webfluxMaven |
6.2.0 up to 6.2.18, plus listed versions 6.2.16.2.106.2.116.2.126.2.13 Show 12 moreShow less6.2.146.2.156.2.166.2.176.2.26.2.36.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.18 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.26, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 16 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.216.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-webfluxMaven |
through 5.3.47, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
None known |
org.springframework:spring-webfluxRed Hat Lightwell:Maven From an advisory covering 16 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-webfluxRoot:Maven |
before 6.1.13-aikido.4 | 6.1.13-aikido.46.2.17-aikido.36.1.1-aikido.36.1.13-aikido.36.2.17-aikido.46.2.17-aikido.66.2.17-aikido.56.1.1-aikido.46.1.1-aikido.56.1.1-aikido.6 |
io.root.org.springframework:spring-webfluxRoot:Maven |
before 6.1.13-root.io.4 | 6.1.13-root.io.46.2.17-root.io.16.2.17-root.io.26.1.1-root.io.26.2.17-root.io.36.1.1-root.io.36.1.13-root.io.36.2.17-root.io.46.2.17-root.io.66.2.17-root.io.56.1.1-root.io.46.1.1-root.io.56.1.1-root.io.6 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| affected, affected_more | ||
| affected, affected_more, aliases | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-22740 is a medium vulnerability (CVSS 6.5) in Vmware Spring Framework, published April 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in org.springframework:spring-webflux 7.0.7.
References
spring.io/security/cve-2026-22740
nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&version=3.1
github.com/advisories/GHSA-5843-p793-ghmm
security-tracker.debian.org/tracker/CVE-2026-22740
Show 21 moreShow less
ubuntu.com/security/CVE-2026-22740
cve.org/CVERecord?id=CVE-2026-22740
Left out here: 95 versions. The JSON record has them. Also not on the record: 112 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 15 source records.