CVE-2026-22741
Static resource cache poisoning in Spring MVC and WebFlux
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Static resource cache poisoning in Spring MVC and WebFlux
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
CVE-2026-22741- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
EUVDEUVD-2026-26206
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
EUVD-2026-26206- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wg35-8jpf-2xv3
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
GHSA-wg35-8jpf-2xv3- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
NVD
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
CVE-2026-22741- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled * the application adds support for encoded resources resolution * the resource cache must be empty when the attacker has access to the application When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
DEBIAN-CVE-2026-22741- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGHSA-wg35-8jpf-2xv3
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
- the application is using Spring MVC or Spring WebFlux
- the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled
- the application adds support for encoded resources resolution
- the resource cache must be empty when the attacker has access to the application
When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
GHSA-wg35-8jpf-2xv3- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-524
- Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-67afc831a93ff9cc
Lightwell Security Advisory: spring-webmvc 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-webmvc 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2024-38816, CVE-2024-38819, CVE-2024-38828, CVE-2025-41242, CVE-2026-22735, CVE-2026-22737, CVE-2026-22741, and CVE-2026-22745.
CVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
CVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Specifically, an application is vulnerable when both of the following are true:
- the web application uses RouterFunctions to serve static resources
- resource handling is explicitly configured with a FileSystemResource location
However, malicious requests are blocked and rejected when any of the following is true:
- the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
- the application runs on Tomcat or Jetty
CVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.
CVE-2025-41242: Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.
An application can be vulnerable when all the following are true:
- the application is deployed as a WAR or with an embedded Servlet container
- the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
- the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling
We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
This patched artifact is a drop-in replacement for org.springframework:spring-webmvc 5.3.18 from Maven Central.
- Record
RHLW-2026-67afc831a93ff9cc- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application is configuring the resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with caching enabled * the application adds support for encoded resources resolution * the resource cache must be empty when the attacker has access to the application When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.
- Record
UBUNTU-CVE-2026-22741- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVCLSA-2026-1779151634 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.21-tuxcare.4.
- Record
CLSA-2026-1779151634- Updated
- 2026-11-02
OSVCLSA-2026-1779238052 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.20-tuxcare.3.
- Record
CLSA-2026-1779238052- Updated
- 2026-11-02
OSVCLSA-2026-1779324468 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.0.23-tuxcare.3.
- Record
CLSA-2026-1779324468- Updated
- 2026-11-02
OSVCLSA-2026-1779842928 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 6.0.16-tuxcare.3.
- Record
CLSA-2026-1779842928- Updated
- 2026-11-02
OSVCLSA-2026-1779842935 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.39-tuxcare.11.
- Record
CLSA-2026-1779842935- Updated
- 2026-11-02
OSVCLSA-2026-1780879906 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 5.3.30-tuxcare.3.
- Record
CLSA-2026-1780879906- Updated
- 2026-11-02
OSVCLSA-2026-1782781166 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.37-tuxcare.7.
- Record
CLSA-2026-1782781166- Updated
- 2026-11-02
OSVCLSA-2026-1783645384 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.4.
- Record
CLSA-2026-1783645384- Updated
- 2026-11-02
OSVCLSA-2026-1783991056 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.31-tuxcare.9.
- Record
CLSA-2026-1783991056- Updated
- 2026-11-02
OSVCLSA-2026-1784509763 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.27-tuxcare.6.
- Record
CLSA-2026-1784509763- Updated
- 2026-11-02
OSVCLSA-2026-1784509765 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.24-tuxcare.4.
- Record
CLSA-2026-1784509765- Updated
- 2026-11-02
OSVCLSA-2026-1784509766 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.29-tuxcare.5.
- Record
CLSA-2026-1784509766- Updated
- 2026-11-02
OSVCLSA-2026-1784596262 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.2.15-tuxcare.1.
- Record
CLSA-2026-1784596262- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1785957138 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785957138- Updated
- 2026-11-02
OSVCLSA-2026-1785957662 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.7.
- Record
CLSA-2026-1785957662- Updated
- 2026-11-02
OSVCLSA-2026-1785958008 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 6.1.15-tuxcare.1.
- Record
CLSA-2026-1785958008- Updated
- 2026-11-02
OSVCLSA-2026-1786515016 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786515016- Updated
- 2026-11-02
OSVCLSA-2026-1786552823 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5.
- Record
CLSA-2026-1786552823- Updated
- 2026-11-02
OSVCLSA-2026-1786555755 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2.
- Record
CLSA-2026-1786555755- Updated
- 2026-11-02
OSVCLSA-2026-1786573855 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.8.
- Record
CLSA-2026-1786573855- Updated
- 2026-11-02
OSVCLSA-2026-1786598361 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.6.
- Record
CLSA-2026-1786598361- Updated
- 2026-11-02
OSVCLSA-2026-1786601101 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.5.
- Record
CLSA-2026-1786601101- Updated
- 2026-11-02
OSVCLSA-2026-1786604803 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 6 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.5.
- Record
CLSA-2026-1786604803- Updated
- 2026-11-02
OSVCLSA-2026-1786609421 No score
TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786609421- Updated
- 2026-11-02
OSVCLSA-2026-1786609560 No score
TuxCare security update for org.grails (18 CVEs)
TuxCare rebuilt 33 org.grails packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1786609560- Updated
- 2026-11-02
OSVCLSA-2026-1786611721 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.3.
- Record
CLSA-2026-1786611721- Updated
- 2026-11-02
OSVCLSA-2026-1787070801 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4.
- Record
CLSA-2026-1787070801- Updated
- 2026-11-02
OSVCLSA-2026-1787148952 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.1.16-tuxcare.2.
- Record
CLSA-2026-1787148952- Updated
- 2026-11-02
OSVCLSA-2026-1787205684 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 6.1.19-tuxcare.1.
- Record
CLSA-2026-1787205684- Updated
- 2026-11-02
OSVCLSA-2026-1787750951 No score
TuxCare security update for org.springframework:spring-webmvc (2 CVEs)
TuxCare rebuilt org.springframework:spring-webmvc to address 2 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.4.
- Record
CLSA-2026-1787750951- Updated
- 2026-11-02
OSVCLSA-2026-1788253370 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.
- Record
CLSA-2026-1788253370- Updated
- 2026-11-02
OSVCLSA-2026-1788276305 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 6.2.13-tuxcare.2.
- Record
CLSA-2026-1788276305- Updated
- 2026-11-02
OSVCLSA-2026-1788287051 No score
TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2.
- Record
CLSA-2026-1788287051- Updated
- 2026-11-02
OSVCLSA-2026-1788341776 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788341776- Updated
- 2026-11-02
OSVCLSA-2026-1788344824 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.
- Record
CLSA-2026-1788344824- Updated
- 2026-11-02
OSVCLSA-2026-1788344832 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.
- Record
CLSA-2026-1788344832- Updated
- 2026-11-02
OSVCLSA-2026-1788346056 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.
- Record
CLSA-2026-1788346056- Updated
- 2026-11-02
OSVCLSA-2026-1788349142 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 21 CVEs. Fixed in 6.1.4-tuxcare.2.
- Record
CLSA-2026-1788349142- Updated
- 2026-11-02
OSVCLSA-2026-1788360559 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.
- Record
CLSA-2026-1788360559- Updated
- 2026-11-02
OSVCLSA-2026-1788361406 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.
- Record
CLSA-2026-1788361406- Updated
- 2026-11-02
OSVCLSA-2026-1788372470 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.
- Record
CLSA-2026-1788372470- Updated
- 2026-11-02
OSVCLSA-2026-1788372833 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.
- Record
CLSA-2026-1788372833- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1789427454 No score
TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1789427454- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webfluxMaven |
7.0.0 to 7.0.6 | 7.0.7 |
org.springframework:spring-webfluxMaven |
6.2.0 to 6.2.17 | 6.2.18 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.26 | None known |
org.springframework:spring-webfluxMaven |
through 5.3.47 | None known |
org.springframework:spring-webmvcMaven |
7.0.0 to 7.0.6 | 7.0.7 |
org.springframework:spring-webmvcMaven |
6.2.0 to 6.2.17 | 6.2.18 |
org.springframework:spring-webmvcMaven |
6.1.0 to 6.1.26 | None known |
org.springframework:spring-webmvcMaven |
through 5.3.47 | None known |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.1.21 up to 6.1.21-tuxcare.4, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.26.1.21-tuxcare.3 |
6.1.21-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
6.1.21 up to 6.1.21-tuxcare.4, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.26.1.21-tuxcare.3 |
6.1.21-tuxcare.4 |
Show 224 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.1.20 up to 6.1.20-tuxcare.3, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.2 |
6.1.20-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
6.1.20 up to 6.1.20-tuxcare.3, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.2 |
6.1.20-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven |
6.0.23 up to 6.0.23-tuxcare.3, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.2 |
6.0.23-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven |
6.0.23 up to 6.0.23-tuxcare.3, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.2 |
6.0.23-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.0.16 up to 6.0.16-tuxcare.3, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.2 |
6.0.16-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
6.0.16 up to 6.0.16-tuxcare.3, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.2 |
6.0.16-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.39 up to 5.3.39-tuxcare.11, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.1 Show 4 moreShow less5.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.11 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.3.39 up to 5.3.39-tuxcare.11, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.1 Show 4 moreShow less5.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.11 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
5.3.30 up to 5.3.30-tuxcare.3, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.2 |
5.3.30-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
5.3.30 up to 5.3.30-tuxcare.3, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.2 |
5.3.30-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
5.3.37 up to 5.3.37-tuxcare.7, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.55.3.37-tuxcare.6 |
5.3.37-tuxcare.7 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.37 up to 5.3.37-tuxcare.7, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.55.3.37-tuxcare.6 |
5.3.37-tuxcare.7 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.37 up to 5.3.37-tuxcare.7, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.55.3.37-tuxcare.6 |
5.3.37-tuxcare.7 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
5.3.37 up to 5.3.37-tuxcare.7, plus listed versions 5.3.37-tuxcare.15.3.37-tuxcare.25.3.37-tuxcare.35.3.37-tuxcare.45.3.37-tuxcare.55.3.37-tuxcare.6 |
5.3.37-tuxcare.7 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.4, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.3 |
5.3.25-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.4, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.3 |
5.3.25-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.4, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.3 |
5.3.25-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.4, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.3 |
5.3.25-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.31 up to 5.3.31-tuxcare.9, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 4 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31.tuxcare |
5.3.31-tuxcare.9 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.3.31 up to 5.3.31-tuxcare.9, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 4 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31.tuxcare |
5.3.31-tuxcare.9 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.27 up to 5.3.27-tuxcare.6, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27.tuxcare.1 |
5.3.27-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.27 up to 5.3.27-tuxcare.6, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27.tuxcare.1 |
5.3.27-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.27 up to 5.3.27-tuxcare.6, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27.tuxcare.1 |
5.3.27-tuxcare.6 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.27 up to 5.3.27-tuxcare.6, plus listed versions 5.3.27-tuxcare.25.3.27-tuxcare.35.3.27-tuxcare.45.3.27-tuxcare.55.3.27.tuxcare.1 |
5.3.27-tuxcare.6 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
5.3.24 up to 5.3.24-tuxcare.4, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.3 |
5.3.24-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.29 up to 5.3.29-tuxcare.5, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.4 |
5.3.29-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.29 up to 5.3.29-tuxcare.5, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.4 |
5.3.29-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.29 up to 5.3.29-tuxcare.5, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.4 |
5.3.29-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
5.3.29 up to 5.3.29-tuxcare.5, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.4 |
5.3.29-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.2.15 up to 6.2.15-tuxcare.1 | 6.2.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
6.2.15 up to 6.2.15-tuxcare.1 | 6.2.15-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.2, plus listed versions 5.0.13.RELEASE-tuxcare.1 |
5.0.13.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 7 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.7, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.6 |
5.2.13.RELEASE-tuxcare.7 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.7, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.6 |
5.2.13.RELEASE-tuxcare.7 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.7, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.6 |
5.2.13.RELEASE-tuxcare.7 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.7, plus listed versions 5.2.13.RELEASE-tuxcare.15.2.13.RELEASE-tuxcare.25.2.13.RELEASE-tuxcare.35.2.13.RELEASE-tuxcare.45.2.13.RELEASE-tuxcare.55.2.13.RELEASE-tuxcare.6 |
5.2.13.RELEASE-tuxcare.7 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
6.1.15 up to 6.1.15-tuxcare.1 | 6.1.15-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.3.7 up to 5.3.7-tuxcare.5, plus listed versions 5.3.7-tuxcare.15.3.7-tuxcare.25.3.7-tuxcare.35.3.7-tuxcare.4 |
5.3.7-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.8, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.24.2.9.RELEASE-tuxcare.34.2.9.RELEASE-tuxcare.44.2.9.RELEASE-tuxcare.54.2.9.RELEASE-tuxcare.64.2.9.RELEASE-tuxcare.7 |
4.2.9.RELEASE-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 3 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.6, plus listed versions 4.3.30.RELEASE-tuxcare.14.3.30.RELEASE-tuxcare.24.3.30.RELEASE-tuxcare.34.3.30.RELEASE-tuxcare.44.3.30.RELEASE-tuxcare.5 |
4.3.30.RELEASE-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.6, plus listed versions 4.3.30.RELEASE-tuxcare.14.3.30.RELEASE-tuxcare.24.3.30.RELEASE-tuxcare.34.3.30.RELEASE-tuxcare.44.3.30.RELEASE-tuxcare.5 |
4.3.30.RELEASE-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 3 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.5, plus listed versions 5.0.5.RELEASE-tuxcare.15.0.5.RELEASE-tuxcare.25.0.5.RELEASE-tuxcare.35.0.5.RELEASE-tuxcare.4 |
5.0.5.RELEASE-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 6 CVEs |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.5, plus listed versions 4.1.7.RELEASE-tuxcare.14.1.7.RELEASE-tuxcare.24.1.7.RELEASE-tuxcare.34.1.7.RELEASE-tuxcare.4 |
4.1.7.RELEASE-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.3, plus listed versions 4.3.25.RELEASE-tuxcare.14.3.25.RELEASE-tuxcare.2 |
4.3.25.RELEASE-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.4, plus listed versions 5.1.20.RELEASE-tuxcare.15.1.20.RELEASE-tuxcare.25.1.20.RELEASE-tuxcare.3 |
5.1.20.RELEASE-tuxcare.4 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 11 CVEs |
6.1.16 up to 6.1.16-tuxcare.2, plus listed versions 6.1.16-tuxcare.1 |
6.1.16-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
6.1.19 up to 6.1.19-tuxcare.1 | 6.1.19-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.4, plus listed versions 4.3.4.RELEASE-tuxcare.14.3.4.RELEASE-tuxcare.24.3.4.RELEASE-tuxcare.3 |
4.3.4.RELEASE-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
6.2.13 up to 6.2.13-tuxcare.2, plus listed versions 6.2.13-tuxcare.1 |
6.2.13-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 24 CVEs |
6.1.13 up to 6.1.13-tuxcare.2, plus listed versions 6.1.13-tuxcare.1 |
6.1.13-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.4, plus listed versions 4.3.9.RELEASE-tuxcare.14.3.9.RELEASE-tuxcare.24.3.9.RELEASE-tuxcare.3 |
4.3.9.RELEASE-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 21 CVEs |
6.1.4 up to 6.1.4-tuxcare.2, plus listed versions 6.1.4-tuxcare.1 |
6.1.4-tuxcare.2 |
org.springframework:springTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.3.21 up to 5.3.21-tuxcare.1 | 5.3.21-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-6 |
None known |
org.springframework:spring-webfluxMaven |
7.0.0 up to 7.0.7, plus listed versions 7.0.17.0.27.0.37.0.47.0.57.0.6 |
7.0.7 |
org.springframework:spring-webfluxMaven |
6.2.0 up to 6.2.18, plus listed versions 6.2.16.2.106.2.116.2.126.2.13 Show 12 moreShow less6.2.146.2.156.2.166.2.176.2.26.2.36.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.18 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.26, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 16 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.216.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-webfluxMaven |
through 5.3.47, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
None known |
org.springframework:spring-webmvcMaven |
7.0.0 up to 7.0.7, plus listed versions 7.0.17.0.27.0.37.0.47.0.57.0.6 |
7.0.7 |
org.springframework:spring-webmvcMaven |
6.2.0 up to 6.2.18, plus listed versions 6.2.16.2.106.2.116.2.126.2.13 Show 12 moreShow less6.2.146.2.156.2.166.2.176.2.26.2.36.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.18 |
org.springframework:spring-webmvcMaven |
6.1.0 to 6.1.26, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 16 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.216.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-webmvcMaven |
through 5.3.47, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
None known |
org.springframework:spring-webmvcRed Hat Lightwell:Maven From an advisory covering 9 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-webfluxRed Hat Lightwell:Maven From an advisory covering 16 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
5.3.18.rhlw-00010 |
org.springframework:spring-webmvcRoot:Maven |
before 6.1.13-aikido.4 | 6.1.13-aikido.45.3.20-aikido.36.2.17-aikido.37.0.6-aikido.26.1.1-aikido.36.2.5-aikido.55.3.20-aikido.46.1.13-aikido.35.3.23-aikido.46.2.17-aikido.46.2.17-aikido.65.3.23-aikido.56.2.17-aikido.55.3.20-aikido.55.3.23-aikido.66.2.5-aikido.67.0.6-aikido.36.1.1-aikido.46.1.1-aikido.56.1.1-aikido.65.3.20-aikido.67.0.6-aikido.45.3.20-aikido.75.3.20-aikido.8 |
org.springframework:spring-webfluxRoot:Maven |
before 6.1.13-aikido.4 | 6.1.13-aikido.46.2.17-aikido.36.1.1-aikido.36.1.13-aikido.36.2.17-aikido.46.2.17-aikido.66.2.17-aikido.56.1.1-aikido.46.1.1-aikido.56.1.1-aikido.6 |
io.root.org.springframework:spring-webmvcRoot:Maven |
before 6.1.13-root.io.4 | 6.1.13-root.io.47.0.6-root.io.16.2.5-root.io.46.2.2-root.io.26.2.17-root.io.26.1.1-root.io.25.3.20-root.io.36.2.17-root.io.37.0.6-root.io.26.1.1-root.io.36.2.5-root.io.55.3.20-root.io.46.1.13-root.io.35.3.23-root.io.46.2.17-root.io.46.2.17-root.io.65.3.23-root.io.56.2.17-root.io.55.3.20-root.io.55.3.23-root.io.66.2.5-root.io.67.0.6-root.io.36.1.1-root.io.46.1.1-root.io.56.1.1-root.io.65.3.20-root.io.67.0.6-root.io.45.3.20-root.io.75.3.20-root.io.8 |
io.root.org.springframework:spring-webfluxRoot:Maven |
before 6.1.13-root.io.4 | 6.1.13-root.io.46.2.17-root.io.16.2.17-root.io.26.1.1-root.io.26.2.17-root.io.36.1.1-root.io.36.1.13-root.io.36.2.17-root.io.46.2.17-root.io.66.2.17-root.io.56.1.1-root.io.46.1.1-root.io.56.1.1-root.io.6 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, affected_more | ||
| affected, affected_more | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-22741 is a low vulnerability (CVSS 3.1) in Vmware Spring Framework, published April 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in org.springframework:spring-webflux 7.0.7.
References
spring.io/security/cve-2026-22741
nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1
docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html
github.com/advisories/GHSA-wg35-8jpf-2xv3
security-tracker.debian.org/tracker/CVE-2026-22741
Show 32 moreShow less
ubuntu.com/security/CVE-2026-22741
cve.org/CVERecord?id=CVE-2026-22741
Left out here: 474 versions. The JSON record has them. Also not on the record: 422 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 43 source records.