CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
4.2 MediumFix available
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.12%Up 0.1 points since Jun 9, 2026
What each source reports
CVE List Score used
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
CVE-2026-41854- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2026-35343
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
EUVD-2026-35343- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7m2p-62gw-p8qq
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
GHSA-7m2p-62gw-p8qq- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
CVE-2026-41854- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVGHSA-7m2p-62gw-p8qq
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
GHSA-7m2p-62gw-p8qq- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-41854
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.
- Record
UBUNTU-CVE-2026-41854- CVSS 3.1
- 4.2 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
Show 44 moreShow less
OSVCLSA-2026-1786477496 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.2.15-tuxcare.4.
- Record
CLSA-2026-1786477496- Updated
- 2026-11-02
OSVCLSA-2026-1786515016 No score
TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786515016- Updated
- 2026-11-02
OSVCLSA-2026-1786534533 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.20-tuxcare.8.
- Record
CLSA-2026-1786534533- Updated
- 2026-11-02
OSVCLSA-2026-1786555755 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2.
- Record
CLSA-2026-1786555755- Updated
- 2026-11-02
OSVCLSA-2026-1786599882 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.15-tuxcare.3.
- Record
CLSA-2026-1786599882- Updated
- 2026-11-02
OSVCLSA-2026-1786606429 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.10.
- Record
CLSA-2026-1786606429- Updated
- 2026-11-02
OSVCLSA-2026-1786607729 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.21-tuxcare.10.
- Record
CLSA-2026-1786607729- Updated
- 2026-11-02
OSVCLSA-2026-1786609421 No score
TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.
- Record
CLSA-2026-1786609421- Updated
- 2026-11-02
OSVCLSA-2026-1786623881 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5.
- Record
CLSA-2026-1786623881- Updated
- 2026-11-02
OSVCLSA-2026-1786717612 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 6.0.23-tuxcare.5.
- Record
CLSA-2026-1786717612- Updated
- 2026-11-02
OSVCLSA-2026-1787726627 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 6.1.13-tuxcare.1.
- Record
CLSA-2026-1787726627- Updated
- 2026-11-02
OSVCLSA-2026-1787728788 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.2.13-tuxcare.1.
- Record
CLSA-2026-1787728788- Updated
- 2026-11-02
OSVCLSA-2026-1787823679 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.39-tuxcare.20.
- Record
CLSA-2026-1787823679- Updated
- 2026-11-02
OSVCLSA-2026-1787917219 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.30-tuxcare.8.
- Record
CLSA-2026-1787917219- Updated
- 2026-11-02
OSVCLSA-2026-1788253370 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.
- Record
CLSA-2026-1788253370- Updated
- 2026-11-02
OSVCLSA-2026-1788283253 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3.
- Record
CLSA-2026-1788283253- Updated
- 2026-11-02
OSVCLSA-2026-1788344824 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.
- Record
CLSA-2026-1788344824- Updated
- 2026-11-02
OSVCLSA-2026-1788344832 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.
- Record
CLSA-2026-1788344832- Updated
- 2026-11-02
OSVCLSA-2026-1788346056 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.
- Record
CLSA-2026-1788346056- Updated
- 2026-11-02
OSVCLSA-2026-1788361406 No score
TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.
- Record
CLSA-2026-1788361406- Updated
- 2026-11-02
OSVCLSA-2026-1788372833 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.
- Record
CLSA-2026-1788372833- Updated
- 2026-11-02
OSVCLSA-2026-1788536930 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.4-tuxcare.5.
- Record
CLSA-2026-1788536930- Updated
- 2026-11-02
OSVCLSA-2026-1788547255 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.16-tuxcare.4.
- Record
CLSA-2026-1788547255- Updated
- 2026-11-02
OSVCLSA-2026-1788800102 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.21-tuxcare.2.
- Record
CLSA-2026-1788800102- Updated
- 2026-11-02
OSVCLSA-2026-1788800921 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 5.3.29-tuxcare.10.
- Record
CLSA-2026-1788800921- Updated
- 2026-11-02
OSVCLSA-2026-1788814705 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9.
- Record
CLSA-2026-1788814705- Updated
- 2026-11-02
OSVCLSA-2026-1788876191 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.24-tuxcare.8.
- Record
CLSA-2026-1788876191- Updated
- 2026-11-02
OSVCLSA-2026-1789703693 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 6.2.5-tuxcare.1.
- Record
CLSA-2026-1789703693- Updated
- 2026-11-02
OSVCLSA-2026-1789722420 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1.
- Record
CLSA-2026-1789722420- Updated
- 2026-11-02
OSVCLSA-2026-1790068633 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 6.0.14-tuxcare.1.
- Record
CLSA-2026-1790068633- Updated
- 2026-11-02
OSVCLSA-2026-1790068772 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.
- Record
CLSA-2026-1790068772- Updated
- 2026-11-02
OSVCLSA-2026-1790069169 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.3-tuxcare.1.
- Record
CLSA-2026-1790069169- Updated
- 2026-11-02
OSVCLSA-2026-1790071189 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.
- Record
CLSA-2026-1790071189- Updated
- 2026-11-02
OSVCLSA-2026-1790074384 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.
- Record
CLSA-2026-1790074384- Updated
- 2026-11-02
OSVCLSA-2026-1790089638 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1.
- Record
CLSA-2026-1790089638- Updated
- 2026-11-02
OSVCLSA-2026-1790102888 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.3.27-tuxcare.10.
- Record
CLSA-2026-1790102888- Updated
- 2026-11-02
OSVCLSA-2026-1792590675 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.7-tuxcare.1.
- Record
CLSA-2026-1792590675- Updated
- 2026-11-02
OSVCLSA-2026-1793618191 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 6.2.14-tuxcare.3.
- Record
CLSA-2026-1793618191- Updated
- 2026-11-02
OSVCLSA-2026-1793623328 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 5.3.7-tuxcare.11.
- Record
CLSA-2026-1793623328- Updated
- 2026-11-02
OSVCLSA-2026-1793625740 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 5.3.18-tuxcare.3.
- Record
CLSA-2026-1793625740- Updated
- 2026-11-02
OSVCLSA-2026-1793881017 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.3.19-tuxcare.4.
- Record
CLSA-2026-1793881017- Updated
- 2026-11-06
OSVCLSA-2026-1793881978 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 5.3.20-tuxcare.4.
- Record
CLSA-2026-1793881978- Updated
- 2026-11-06
OSVCLSA-2026-1793882509 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 5.3.33-tuxcare.5.
- Record
CLSA-2026-1793882509- Updated
- 2026-11-06
OSVCLSA-2026-1793904848 No score
TuxCare security update for org.springframework:spring-web (1 CVE)
TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 5.3.32-tuxcare.5.
- Record
CLSA-2026-1793904848- Updated
- 2026-11-06
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webMaven |
7.0.0 to 7.0.7 | 7.0.8 |
org.springframework:spring-webMaven |
6.2.0 to 6.2.18 | 6.2.19 |
org.springframework:spring-webTuxCare:Maven |
6.2.15 up to 6.2.15-tuxcare.4, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.26.2.15-tuxcare.3 |
6.2.15-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
Show 203 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 17 CVEs |
6.2.1 up to 6.2.1-tuxcare.1 | 6.2.1-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
6.1.20 up to 6.1.20-tuxcare.8, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.46.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.7 |
6.1.20-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.1.7 up to 6.1.7-tuxcare.2, plus listed versions 6.1.7-tuxcare.1 |
6.1.7-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven |
6.1.15 up to 6.1.15-tuxcare.3, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.2 |
6.1.15-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.31 up to 5.3.31-tuxcare.10, plus listed versions 5.3.31-tuxcare.15.3.31-tuxcare.25.3.31-tuxcare.35.3.31-tuxcare.45.3.31-tuxcare.5 Show 5 moreShow less5.3.31-tuxcare.65.3.31-tuxcare.75.3.31-tuxcare.85.3.31-tuxcare.95.3.31.tuxcare |
5.3.31-tuxcare.10 |
org.springframework:spring-webTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.10, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.26.1.21-tuxcare.36.1.21-tuxcare.46.1.21-tuxcare.5 Show 4 moreShow less6.1.21-tuxcare.66.1.21-tuxcare.76.1.21-tuxcare.86.1.21-tuxcare.9 |
6.1.21-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.0.16 up to 6.0.16-tuxcare.5, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.4 |
6.0.16-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
6.0.23 up to 6.0.23-tuxcare.5, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 |
6.0.23-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
6.0.23 up to 6.0.23-tuxcare.5, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 |
6.0.23-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
6.0.23 up to 6.0.23-tuxcare.5, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 |
6.0.23-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
6.0.23 up to 6.0.23-tuxcare.5, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 |
6.0.23-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
6.0.23 up to 6.0.23-tuxcare.5, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 |
6.0.23-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.1.13 up to 6.1.13-tuxcare.1 | 6.1.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 2 CVEs |
5.3.39 up to 5.3.39-tuxcare.20, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 13 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.185.3.39-tuxcare.195.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.20 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
5.3.39 up to 5.3.39-tuxcare.20, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 13 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.185.3.39-tuxcare.195.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.20 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
5.3.39 up to 5.3.39-tuxcare.20, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 13 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.185.3.39-tuxcare.195.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.20 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
5.3.30 up to 5.3.30-tuxcare.8, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.25.3.30-tuxcare.35.3.30-tuxcare.45.3.30-tuxcare.55.3.30-tuxcare.65.3.30-tuxcare.7 |
5.3.30-tuxcare.8 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 4 CVEs |
5.3.30 up to 5.3.30-tuxcare.8, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.25.3.30-tuxcare.35.3.30-tuxcare.45.3.30-tuxcare.55.3.30-tuxcare.65.3.30-tuxcare.7 |
5.3.30-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.30 up to 5.3.30-tuxcare.8, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.25.3.30-tuxcare.35.3.30-tuxcare.45.3.30-tuxcare.55.3.30-tuxcare.65.3.30-tuxcare.7 |
5.3.30-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.30 up to 5.3.30-tuxcare.8, plus listed versions 5.3.30-tuxcare.15.3.30-tuxcare.25.3.30-tuxcare.35.3.30-tuxcare.45.3.30-tuxcare.55.3.30-tuxcare.65.3.30-tuxcare.7 |
5.3.30-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.1.14 up to 6.1.14-tuxcare.1 | 6.1.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.1.19 up to 6.1.19-tuxcare.3, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.2 |
6.1.19-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 27 CVEs |
6.0.13 up to 6.0.13-tuxcare.1 | 6.0.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 28 CVEs |
6.0.15 up to 6.0.15-tuxcare.1 | 6.0.15-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
6.0.11 up to 6.0.11-tuxcare.1 | 6.0.11-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 21 CVEs |
6.0.0 up to 6.0.0-tuxcare.1 | 6.0.0-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 25 CVEs |
6.0.12 up to 6.0.12-tuxcare.1 | 6.0.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven |
6.1.4 up to 6.1.4-tuxcare.5, plus listed versions 6.1.4-tuxcare.16.1.4-tuxcare.26.1.4-tuxcare.36.1.4-tuxcare.4 |
6.1.4-tuxcare.5 |
org.springframework:spring-webTuxCare:Maven |
6.1.16 up to 6.1.16-tuxcare.4, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.26.1.16-tuxcare.3 |
6.1.16-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.21 up to 5.3.21-tuxcare.2, plus listed versions 5.3.21-tuxcare.1 |
5.3.21-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.10, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 Show 4 moreShow less5.3.29-tuxcare.65.3.29-tuxcare.75.3.29-tuxcare.85.3.29-tuxcare.9 |
5.3.29-tuxcare.10 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.10, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 Show 4 moreShow less5.3.29-tuxcare.65.3.29-tuxcare.75.3.29-tuxcare.85.3.29-tuxcare.9 |
5.3.29-tuxcare.10 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.10, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 Show 4 moreShow less5.3.29-tuxcare.65.3.29-tuxcare.75.3.29-tuxcare.85.3.29-tuxcare.9 |
5.3.29-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.10, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 Show 4 moreShow less5.3.29-tuxcare.65.3.29-tuxcare.75.3.29-tuxcare.85.3.29-tuxcare.9 |
5.3.29-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.29 up to 5.3.29-tuxcare.10, plus listed versions 5.3.29-tuxcare.15.3.29-tuxcare.25.3.29-tuxcare.35.3.29-tuxcare.45.3.29-tuxcare.5 Show 4 moreShow less5.3.29-tuxcare.65.3.29-tuxcare.75.3.29-tuxcare.85.3.29-tuxcare.9 |
5.3.29-tuxcare.10 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.25 up to 5.3.25-tuxcare.9, plus listed versions 5.3.25-tuxcare.15.3.25-tuxcare.25.3.25-tuxcare.35.3.25-tuxcare.45.3.25-tuxcare.55.3.25-tuxcare.65.3.25-tuxcare.75.3.25-tuxcare.8 |
5.3.25-tuxcare.9 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
5.3.24 up to 5.3.24-tuxcare.8, plus listed versions 5.3.24-tuxcare.15.3.24-tuxcare.25.3.24-tuxcare.35.3.24-tuxcare.45.3.24-tuxcare.55.3.24-tuxcare.65.3.24-tuxcare.7 |
5.3.24-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 36 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 31 CVEs |
6.0.14 up to 6.0.14-tuxcare.1 | 6.0.14-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.2.3 up to 6.2.3-tuxcare.1 | 6.2.3-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 35 CVEs |
5.3.23 up to 5.3.23-tuxcare.1 | 5.3.23-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
5.3.13 up to 5.3.13-tuxcare.1 | 5.3.13-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 33 CVEs |
5.3.9 up to 5.3.9-tuxcare.1 | 5.3.9-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
5.3.9 up to 5.3.9-tuxcare.1 | 5.3.9-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
5.3.9 up to 5.3.9-tuxcare.1 | 5.3.9-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
5.3.9 up to 5.3.9-tuxcare.1 | 5.3.9-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
5.3.9 up to 5.3.9-tuxcare.1 | 5.3.9-tuxcare.1 |
org.springframework:spring-webMaven |
7.0.0 up to 7.0.8, plus listed versions 7.0.17.0.27.0.37.0.47.0.57.0.67.0.7 |
7.0.8 |
org.springframework:spring-webMaven |
6.2.0 up to 6.2.19, plus listed versions 6.2.16.2.106.2.116.2.126.2.13 Show 13 moreShow less6.2.146.2.156.2.166.2.176.2.186.2.26.2.36.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.19 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | ||
| affected_more, aliases | OSV | |
| affected, facts | ||
| affected, affected_more | ||
| affected, affected_more, aliases | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-41854 is a medium vulnerability (CVSS 4.2) in Spring Framework, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 2nd percentile. Fixed in org.springframework:spring-web 7.0.8.
References
This page doesn't list everything
Also not on the record: 48 package claims. ID and package lookups still check them.