CVE-2022-22965
Remote Code Execution in Spring Framework
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
EUVDEUVD-2022-1283
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
EUVD-2022-1283- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-36p3-wjmg-h94x
Remote Code Execution in Spring Framework
Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as Spring4Shell.
Impact
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
These are the prerequisites for the exploit:
- JDK 9 or higher
- Apache Tomcat as the Servlet container
- Packaged as WAR
spring-webmvcorspring-webfluxdependency
Patches
Workarounds
For those who are unable to upgrade, leaked reports recommend setting disallowedFields on WebDataBinder through an @ControllerAdvice. This works generally, but as a centrally applied workaround fix, may leave some loopholes, in particular if a controller sets disallowedFields locally through its own @InitBinder method, which overrides the global setting.
To apply the workaround in a more fail-safe way, applications could extend RequestMappingHandlerAdapter to update the WebDataBinder at the end after all other initialization. In order to do that, a Spring Boot application can declare a WebMvcRegistrations bean (Spring MVC) or a WebFluxRegistrations bean (Spring WebFlux).
- Record
GHSA-36p3-wjmg-h94x- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H - Weakness
- CWE-74, CWE-94
- Updated
- 2026-11-02
CISA KEV No score
Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
- Record
CVE-2022-22965- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
DEBIAN-CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVGHSA-36p3-wjmg-h94x
Remote Code Execution in Spring Framework
Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as Spring4Shell.
Impact
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
These are the prerequisites for the exploit:
- JDK 9 or higher
- Apache Tomcat as the Servlet container
- Packaged as WAR
spring-webmvcorspring-webfluxdependency
Patches
Workarounds
For those who are unable to upgrade, leaked reports recommend setting disallowedFields on WebDataBinder through an @ControllerAdvice. This works generally, but as a centrally applied workaround fix, may leave some loopholes, in particular if a controller sets disallowedFields locally through its own @InitBinder method, which overrides the global setting.
To apply the workaround in a more fail-safe way, applications could extend RequestMappingHandlerAdapter to update the WebDataBinder at the end after all other initialization. In order to do that, a Spring Boot application can declare a WebMvcRegistrations bean (Spring MVC) or a WebFluxRegistrations bean (Spring WebFlux).
- Record
GHSA-36p3-wjmg-h94x- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H - Weakness
- CWE-74, CWE-94
- Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2022-22965
CVE-2022-22965 in org.springframework:spring-beans - Patched by Root
Root has patched CVE-2022-22965 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H - Updated
- 2026-11-04
OSVUBUNTU-CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- Record
UBUNTU-CVE-2022-22965- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1752019358 No score
TuxCare security update for org.springframework.boot (5 CVEs)
TuxCare rebuilt 6 org.springframework.boot packages to address 5 CVEs. Fixed in 2.4.6.tuxcare.2.
- Record
CLSA-2025-1752019358- Updated
- 2026-11-02
OSVCLSA-2025-1756771563 No score
TuxCare security update for org.springframework (16 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.
- Record
CLSA-2025-1756771563- Updated
- 2026-11-02
OSVCLSA-2025-1758845168 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 4.1.7.RELEASE-tuxcare.1.
- Record
CLSA-2025-1758845168- Updated
- 2026-11-02
OSVCLSA-2025-1760313981 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313981- Updated
- 2026-11-02
OSVCLSA-2025-1760313986 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.
- Record
CLSA-2025-1760313986- Updated
- 2026-11-02
OSVCLSA-2025-1762906008 No score
TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1.
- Record
CLSA-2025-1762906008- Updated
- 2026-11-02
OSVCLSA-2026-1774311639 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1774311639- Updated
- 2026-11-02
OSVCLSA-2026-1774916751 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1.
- Record
CLSA-2026-1774916751- Updated
- 2026-11-02
OSVCLSA-2026-1776213242 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.
- Record
CLSA-2026-1776213242- Updated
- 2026-11-02
OSVCLSA-2026-1777941826 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.
- Record
CLSA-2026-1777941826- Updated
- 2026-11-02
OSVCLSA-2026-1781571260 No score
TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 4.2.9.RELEASE-tuxcare.3.
- Record
CLSA-2026-1781571260- Updated
- 2026-11-02
OSVCLSA-2026-1782867606 No score
TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.
- Record
CLSA-2026-1782867606- Updated
- 2026-11-02
OSVCLSA-2026-1784509762 No score
TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.8.
- Record
CLSA-2026-1784509762- Updated
- 2026-11-02
OSVCLSA-2026-1785030424 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785030424- Updated
- 2026-11-02
OSVCLSA-2026-1785204448 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1785204448- Updated
- 2026-11-02
OSVCLSA-2026-1785380133 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785380133- Updated
- 2026-11-02
OSVCLSA-2026-1785380233 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.1.
- Record
CLSA-2026-1785380233- Updated
- 2026-11-02
OSVCLSA-2026-1785380498 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785380498- Updated
- 2026-11-02
OSVCLSA-2026-1785814744 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785814744- Updated
- 2026-11-02
OSVCLSA-2026-1785815205 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.
- Record
CLSA-2026-1785815205- Updated
- 2026-11-02
OSVCLSA-2026-1786609560 No score
TuxCare security update for org.grails (18 CVEs)
TuxCare rebuilt 33 org.grails packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1786609560- Updated
- 2026-11-02
OSVCLSA-2026-1789380988 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.
- Record
CLSA-2026-1789380988- Updated
- 2026-11-02
OSVCLSA-2026-1789427454 No score
TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.
- Record
CLSA-2026-1789427454- Updated
- 2026-11-02
OSVCLSA-2026-1790102819 No score
TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 5.3.5-tuxcare.1.
- Record
CLSA-2026-1790102819- Updated
- 2026-11-02
OSVCLSA-2026-1790157664 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790157664- Updated
- 2026-11-02
OSVCLSA-2026-1790233969 No score
TuxCare security update for org.springframework (23 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 23 CVEs. Fixed in 5.2.15.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790233969- Updated
- 2026-11-02
OSVCLSA-2026-1790234139 No score
TuxCare security update for org.springframework (22 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 22 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.2.
- Record
CLSA-2026-1790234139- Updated
- 2026-11-02
OSVCLSA-2026-1790234279 No score
TuxCare security update for org.springframework (27 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 27 CVEs. Fixed in 5.2.17.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790234279- Updated
- 2026-11-02
OSVCLSA-2026-1790878884 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1790878884- Updated
- 2026-11-02
OSVCLSA-2026-1791107509 No score
TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791107509- Updated
- 2026-11-02
OSVCLSA-2026-1791218487 No score
TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791218487- Updated
- 2026-11-02
OSVCLSA-2026-1791289094 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.
- Record
CLSA-2026-1791289094- Updated
- 2026-11-02
OSVCLSA-2026-1792575333 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792575333- Updated
- 2026-11-02
OSVCLSA-2026-1792590655 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792590655- Updated
- 2026-11-02
OSVCLSA-2026-1792590787 No score
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792590787- Updated
- 2026-11-02
OSVCLSA-2026-1792591113 No score
TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.
- Record
CLSA-2026-1792591113- Updated
- 2026-11-02
OSVCLSA-2026-1793615375 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.3.
- Record
CLSA-2026-1793615375- Updated
- 2026-11-02
OSVCLSA-2026-1793616969 No score
TuxCare security update for org.springframework (16 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 16 CVEs. Fixed in 5.2.9.RELEASE-tuxcare.2.
- Record
CLSA-2026-1793616969- Updated
- 2026-11-02
OSVCLSA-2026-1793632081 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 5.3.13-tuxcare.5.
- Record
CLSA-2026-1793632081- Updated
- 2026-11-02
OSVCLSA-2026-1793635118 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.2.
- Record
CLSA-2026-1793635118- Updated
- 2026-11-02
OSVCLSA-2026-1793883499 No score
TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 18 CVEs. Fixed in 5.2.8.RELEASE-tuxcare.3.
- Record
CLSA-2026-1793883499- Updated
- 2026-11-06
OSVCLSA-2026-1793884148 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.3-tuxcare.4.
- Record
CLSA-2026-1793884148- Updated
- 2026-11-06
OSVCLSA-2026-1793897029 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.2.
- Record
CLSA-2026-1793897029- Updated
- 2026-11-06
OSVUSN-7165-1 No score
libspring-java vulnerability
It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could possibly use this issue to achieve remote code execution and obtain sensitive information.
- Record
USN-7165-1- Updated
- 2026-11-02
Affected products
- vmware spring framework
- cisco cx cloud agent
- oracle commerce platform
- oracle communications cloud native core automated test suite
- oracle communications cloud native core binding support function
- oracle communications cloud native core console
- oracle communications cloud native core network exposure function
- oracle communications cloud native core network function cloud native environment
- oracle communications cloud native core network repository function
- oracle communications cloud native core network slice selection function
- oracle communications cloud native core policy
- oracle communications cloud native core security edge protection proxy
Show 26 moreShow less
- oracle communications cloud native core unified data repository
- oracle communications policy management
- oracle communications unified inventory management
- oracle financial services analytical applications infrastructure
- oracle financial services behavior detection platform
- oracle financial services enterprise case management
- oracle mysql enterprise monitor
- oracle product lifecycle analytics
- oracle retail bulk data integration
- oracle retail customer management and segmentation foundation
- oracle retail financial integration
- oracle retail integration bus
- oracle retail merchandising system
- oracle retail xstore point of service
- oracle sd-wan edge
- oracle weblogic server
- siemens operation scheduler
- siemens simatic speech assistant for machines
- siemens sinec network management system
- siemens sipass integrated
- siemens siveillance identity
- veritas access appliance
- veritas flex appliance
- veritas netbackup appliance
- veritas netbackup flex scale appliance
- veritas netbackup virtual appliance
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-beansMaven |
5.3.0 up to 5.3.18 | 5.3.18 |
org.springframework:spring-webmvcMaven |
5.3.0 up to 5.3.18 | 5.3.18 |
org.springframework.boot:spring-boot-starter-webMaven |
before 2.5.12 | 2.5.12 |
org.springframework.boot:spring-boot-starter-webMaven |
2.6.0 up to 2.6.6 | 2.6.6 |
org.springframework:spring-webfluxMaven |
5.3.0 up to 5.3.18 | 5.3.18 |
org.springframework.boot:spring-boot-starter-webfluxMaven |
before 2.5.12 | 2.5.12 |
org.springframework.boot:spring-boot-starter-webfluxMaven |
2.6.0 up to 2.6.6 | 2.6.6 |
org.springframework:spring-beansMaven |
before 5.2.20.RELEASE | 5.2.20.RELEASE |
org.springframework:spring-webmvcMaven |
before 5.2.20.RELEASE | 5.2.20.RELEASE |
org.springframework:spring-webfluxMaven |
before 5.2.20.RELEASE | 5.2.20.RELEASE |
Show 222 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework.boot:spring-bootTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework.boot:spring-boot-actuatorTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework.boot:spring-boot-actuator-autoconfigureTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework.boot:spring-boot-autoconfigureTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework.boot:spring-boot-starter-webTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework.boot:spring-boot-starter-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
2.4.6 up to 2.4.6.tuxcare.2 | 2.4.6.tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 16 CVEs |
4.3.30.RELEASE up to 4.3.30.RELEASE-tuxcare.1 | 4.3.30.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.1 | 4.1.7.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven |
4.1.7.RELEASE up to 4.1.7.RELEASE-tuxcare.1 | 4.1.7.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
4.0.0.RELEASE up to 4.0.0.RELEASE-tuxcare.1 | 4.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-oxmTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
3.1.1.RELEASE up to 3.1.1.RELEASE-tuxcare.1 | 3.1.1.RELEASE-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 13 CVEs |
5.2.0.RELEASE up to 5.2.0.RELEASE-tuxcare.1 | 5.2.0.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.2.13.RELEASE up to 5.2.13.RELEASE-tuxcare.1 | 5.2.13.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 5 CVEs |
5.3.7 up to 5.3.7-tuxcare.1 | 5.3.7-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 6 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
5.1.20.RELEASE up to 5.1.20.RELEASE-tuxcare.1 | 5.1.20.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.3, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.2 |
4.2.9.RELEASE-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven |
4.2.9.RELEASE up to 4.2.9.RELEASE-tuxcare.3, plus listed versions 4.2.9.RELEASE-tuxcare.14.2.9.RELEASE-tuxcare.2 |
4.2.9.RELEASE-tuxcare.3 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 12 CVEs |
4.1.9.RELEASE up to 4.1.9.RELEASE-tuxcare.1 | 4.1.9.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 11 CVEs |
3.0.5.RELEASE up to 3.0.5.RELEASE-tuxcare.8, plus listed versions 3.0.5.RELEASE-tuxcare.13.0.5.RELEASE-tuxcare.23.0.5.RELEASE-tuxcare.33.0.5.RELEASE-tuxcare.43.0.5.RELEASE-tuxcare.53.0.5.RELEASE-tuxcare.63.0.5.RELEASE-tuxcare.7 |
3.0.5.RELEASE-tuxcare.8 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
5.1.9.RELEASE up to 5.1.9.RELEASE-tuxcare.2, plus listed versions 5.1.9.RELEASE-tuxcare.1 |
5.1.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
5.0.13.RELEASE up to 5.0.13.RELEASE-tuxcare.1 | 5.0.13.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 5 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.2, plus listed versions 4.3.4.RELEASE-tuxcare.1 |
4.3.4.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 5 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.2, plus listed versions 4.3.4.RELEASE-tuxcare.1 |
4.3.4.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.2, plus listed versions 4.3.4.RELEASE-tuxcare.1 |
4.3.4.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 5 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.2, plus listed versions 4.3.4.RELEASE-tuxcare.1 |
4.3.4.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
4.3.4.RELEASE up to 4.3.4.RELEASE-tuxcare.2, plus listed versions 4.3.4.RELEASE-tuxcare.1 |
4.3.4.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 2 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.1 | 4.3.25.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 2 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.1 | 4.3.25.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 2 CVEs |
4.3.25.RELEASE up to 4.3.25.RELEASE-tuxcare.1 | 4.3.25.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 6 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.2, plus listed versions 4.3.9.RELEASE-tuxcare.1 |
4.3.9.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 6 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.2, plus listed versions 4.3.9.RELEASE-tuxcare.1 |
4.3.9.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.2, plus listed versions 4.3.9.RELEASE-tuxcare.1 |
4.3.9.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 6 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.2, plus listed versions 4.3.9.RELEASE-tuxcare.1 |
4.3.9.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
4.3.9.RELEASE up to 4.3.9.RELEASE-tuxcare.2, plus listed versions 4.3.9.RELEASE-tuxcare.1 |
4.3.9.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
5.0.5.RELEASE up to 5.0.5.RELEASE-tuxcare.2, plus listed versions 5.0.5.RELEASE-tuxcare.1 |
5.0.5.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 23 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.2, plus listed versions 5.1.6.RELEASE-tuxcare.1 |
5.1.6.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 20 CVEs |
5.2.11.RELEASE up to 5.2.11.RELEASE-tuxcare.1 | 5.2.11.RELEASE-tuxcare.1 |
org.springframework:springTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 18 CVEs |
5.3.6 up to 5.3.6-tuxcare.1 | 5.3.6-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 25 CVEs |
5.3.5 up to 5.3.5-tuxcare.1 | 5.3.5-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 29 CVEs |
5.2.10.RELEASE up to 5.2.10.RELEASE-tuxcare.1 | 5.2.10.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 23 CVEs |
5.2.15.RELEASE up to 5.2.15.RELEASE-tuxcare.1 | 5.2.15.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 22 CVEs |
5.2.7.RELEASE up to 5.2.7.RELEASE-tuxcare.2, plus listed versions 5.2.7.RELEASE-tuxcare.1 |
5.2.7.RELEASE-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 27 CVEs |
5.2.17.RELEASE up to 5.2.17.RELEASE-tuxcare.1 | 5.2.17.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-framework-bomTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 34 CVEs |
5.1.8.RELEASE up to 5.1.8.RELEASE-tuxcare.1 | 5.1.8.RELEASE-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 35 CVEs |
5.0.0.RELEASE up to 5.0.0.RELEASE-tuxcare.1 | 5.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 35 CVEs |
5.0.0.RELEASE up to 5.0.0.RELEASE-tuxcare.1 | 5.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 35 CVEs |
5.0.0.RELEASE up to 5.0.0.RELEASE-tuxcare.1 | 5.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 35 CVEs |
5.0.0.RELEASE up to 5.0.0.RELEASE-tuxcare.1 | 5.0.0.RELEASE-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 35 CVEs |
5.0.0.RELEASE up to 5.0.0.RELEASE-tuxcare.1 | 5.0.0.RELEASE-tuxcare.1 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-44.3.30-54.3.30-65.1.20-1 |
None known |
org.springframework:spring-beansMaven |
before 5.2.20.RELEASE, plus listed versions 1.01.0-m41.0-rc11.0.11.2 Show 45 moreShow less1.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE3.0.1.RELEASE3.0.2.RELEASE3.0.3.RELEASE3.0.4.RELEASE3.0.5.RELEASE3.0.6.RELEASE3.0.7.RELEASE |
5.2.20.RELEASE |
org.springframework:spring-beansMaven |
5.3.0 up to 5.3.18, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 12 moreShow less5.3.145.3.155.3.165.3.175.3.25.3.35.3.45.3.55.3.65.3.75.3.85.3.9 |
5.3.18 |
org.springframework:spring-webmvcMaven |
before 5.2.20.RELEASE, plus listed versions 1.01.0-rc11.0.11.11.1-rc1 Show 45 moreShow less1.1-rc21.1.11.1.21.1.31.1.41.1.51.21.2-rc11.2-rc21.2.11.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.92.02.0-m12.0-m22.0-m32.0-m42.0-m52.0-rc12.0-rc22.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.52.5.12.5.22.5.32.5.42.5.52.5.62.5.6.SEC012.5.6.SEC022.5.6.SEC033.0.0.RELEASE |
5.2.20.RELEASE |
org.springframework:spring-webmvcMaven |
5.3.0 up to 5.3.18, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 12 moreShow less5.3.145.3.155.3.165.3.175.3.25.3.35.3.45.3.55.3.65.3.75.3.85.3.9 |
5.3.18 |
org.springframework.boot:spring-boot-starter-webMaven |
before 2.5.12, plus listed versions 1.0.0.RELEASE1.0.1.RELEASE1.0.2.RELEASE1.1.0.RELEASE1.1.1.RELEASE Show 45 moreShow less1.1.10.RELEASE1.1.11.RELEASE1.1.12.RELEASE1.1.2.RELEASE1.1.3.RELEASE1.1.4.RELEASE1.1.5.RELEASE1.1.6.RELEASE1.1.7.RELEASE1.1.8.RELEASE1.1.9.RELEASE1.2.0.RELEASE1.2.1.RELEASE1.2.2.RELEASE1.2.3.RELEASE1.2.4.RELEASE1.2.5.RELEASE1.2.6.RELEASE1.2.7.RELEASE1.2.8.RELEASE1.3.0.RELEASE1.3.1.RELEASE1.3.2.RELEASE1.3.3.RELEASE1.3.4.RELEASE1.3.5.RELEASE1.3.6.RELEASE1.3.7.RELEASE1.3.8.RELEASE1.4.0.RELEASE1.4.1.RELEASE1.4.2.RELEASE1.4.3.RELEASE1.4.4.RELEASE1.4.5.RELEASE1.4.6.RELEASE1.4.7.RELEASE1.5.0.RELEASE1.5.1.RELEASE1.5.10.RELEASE1.5.11.RELEASE1.5.12.RELEASE1.5.13.RELEASE1.5.14.RELEASE1.5.15.RELEASE |
2.5.12 |
org.springframework.boot:spring-boot-starter-webMaven |
2.6.0 up to 2.6.6, plus listed versions 2.6.12.6.22.6.32.6.42.6.5 |
2.6.6 |
org.springframework:spring-webfluxMaven |
before 5.2.20.RELEASE, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
5.2.20.RELEASE |
org.springframework:spring-webfluxMaven |
5.3.0 up to 5.3.18, plus listed versions 5.3.15.3.105.3.115.3.125.3.13 Show 12 moreShow less5.3.145.3.155.3.165.3.175.3.25.3.35.3.45.3.55.3.65.3.75.3.85.3.9 |
5.3.18 |
org.springframework.boot:spring-boot-starter-webfluxMaven |
before 2.5.12, plus listed versions 2.0.0.RELEASE2.0.1.RELEASE2.0.2.RELEASE2.0.3.RELEASE2.0.4.RELEASE Show 45 moreShow less2.0.5.RELEASE2.0.6.RELEASE2.0.7.RELEASE2.0.8.RELEASE2.0.9.RELEASE2.1.0.RELEASE2.1.1.RELEASE2.1.10.RELEASE2.1.11.RELEASE2.1.12.RELEASE2.1.13.RELEASE2.1.14.RELEASE2.1.15.RELEASE2.1.16.RELEASE2.1.17.RELEASE2.1.18.RELEASE2.1.2.RELEASE2.1.3.RELEASE2.1.4.RELEASE2.1.5.RELEASE2.1.6.RELEASE2.1.7.RELEASE2.1.8.RELEASE2.1.9.RELEASE2.2.0.RELEASE2.2.1.RELEASE2.2.10.RELEASE2.2.11.RELEASE2.2.12.RELEASE2.2.13.RELEASE2.2.2.RELEASE2.2.3.RELEASE2.2.4.RELEASE2.2.5.RELEASE2.2.6.RELEASE2.2.7.RELEASE2.2.8.RELEASE2.2.9.RELEASE2.3.0.RELEASE2.3.1.RELEASE2.3.10.RELEASE2.3.11.RELEASE2.3.12.RELEASE2.3.2.RELEASE2.3.3.RELEASE |
2.5.12 |
org.springframework.boot:spring-boot-starter-webfluxMaven |
2.6.0 up to 2.6.6, plus listed versions 2.6.12.6.22.6.32.6.42.6.5 |
2.6.6 |
org.springframework:spring-beansRoot:Maven |
before 5.3.14-aikido.4 | 5.3.14-aikido.45.3.14-aikido.25.3.14-aikido.35.3.14-aikido.55.3.14-aikido.65.3.14-aikido.74.0.3.RELEASE-aikido.54.0.3.RELEASE-aikido.65.3.14-aikido.84.0.3.RELEASE-aikido.74.0.3.RELEASE-aikido.8 |
org.springframework:spring-webmvcRoot:Maven |
before 4.0.3.RELEASE-aikido.1 | 4.0.3.RELEASE-aikido.14.0.3.RELEASE-aikido.24.0.3.RELEASE-aikido.34.0.3.RELEASE-aikido.44.0.3.RELEASE-aikido.54.0.3.RELEASE-aikido.64.0.3.RELEASE-aikido.74.0.3.RELEASE-aikido.8 |
io.root.org.springframework:spring-beansRoot:Maven |
before 5.3.14-root.io.4 | 5.3.14-root.io.45.3.14-root.io.25.3.14-root.io.35.3.14-root.io.55.3.14-root.io.65.3.14-root.io.74.0.3.RELEASE-root.io.54.0.3.RELEASE-root.io.65.3.14-root.io.84.0.3.RELEASE-root.io.74.0.3.RELEASE-root.io.8 |
io.root.org.springframework:spring-webmvcRoot:Maven |
before 4.0.3.RELEASE-root.io.1 | 4.0.3.RELEASE-root.io.14.0.3.RELEASE-root.io.24.0.3.RELEASE-root.io.34.0.3.RELEASE-root.io.44.0.3.RELEASE-root.io.54.0.3.RELEASE-root.io.64.0.3.RELEASE-root.io.74.0.3.RELEASE-root.io.8 |
libspring-javaUbuntu:Pro:18.04:LTS |
before 4.3.22-1~18.04.1~esm1, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.04 |
4.3.22-1~18.04.1~esm1 |
libspring-javaUbuntu:Pro:20.04:LTS |
before 4.3.22-4ubuntu0.1~esm1, plus listed versions 4.3.22-4 |
4.3.22-4ubuntu0.1~esm1 |
libspring-javaUbuntu:Pro:22.04:LTS |
before 4.3.30-1ubuntu0.1~esm1, plus listed versions 4.3.30-1 |
4.3.30-1ubuntu0.1~esm1 |
libspring-javaUbuntu:Pro:24.04:LTS |
before 4.3.30-2ubuntu0.24.04.1~esm1, plus listed versions 4.3.30-2 |
4.3.30-2ubuntu0.24.04.1~esm1 |
libspring-javaUbuntu:25.10 |
before 4.3.30-2ubuntu1 | 4.3.30-2ubuntu1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | BobTheShoplifter/Spring4Shell-POC | 2022-03-30 |
| PoC in GitHub | Mr-xn/spring-core-rce | 2022-03-30 |
| PoC in GitHub | TheGejr/SpringShell | 2022-03-30 |
| PoC in GitHub | Bouquets-ai/CVE-2022-22965-GUItools | 2022-03-31 |
| PoC in GitHub | DDuarte/springshell-rce-poc | 2022-03-31 |
| PoC in GitHub | FourCoreLabs/spring4shell-exploit-poc | 2022-03-31 |
| PoC in GitHub | GuayoyoCyber/CVE-2022-22965 | 2022-03-31 |
| PoC in GitHub | Kirill89/CVE-2022-22965-PoC | 2022-03-31 |
| PoC in GitHub | alt3kx/CVE-2022-22965_PoC | 2022-03-31 |
| PoC in GitHub | colincowie/Safer_PoC_CVE-2022-22965 | 2022-03-31 |
Show 17 moreShow less
| Source | Link | Date |
|---|---|---|
| Metasploit | Spring Framework Class property RCE (Spring4Shell) | 2022-03-31 |
| PoC in GitHub | k3rwin/spring-core-rce | 2022-03-31 |
| PoC in GitHub | liangyueliangyue/spring-core-rce | 2022-03-31 |
| PoC in GitHub | reznok/Spring4Shell-POC | 2022-03-31 |
| PoC in GitHub | rwincey/spring4shell-CVE-2022-22965 | 2022-03-31 |
| PoC in GitHub | viniciuspereiras/CVE-2022-22965-poc | 2022-03-31 |
| PoC in GitHub | Joe1sn/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | SecNN/SpringFramework_CVE-2022-22965_RCE | 2022-04-01 |
| PoC in GitHub | helsecert/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | lcarea/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | likewhite/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | me2nuk/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | mebibite/springhound | 2022-04-01 |
| PoC in GitHub | nu0l/CVE-2022-22965 | 2022-04-01 |
| PoC in GitHub | snicoll-scratches/spring-boot-cve-2022-22965 | 2022-04-01 |
| PoC in GitHub | tangxiaofeng7/CVE-2022-22965-Spring-Core-Rce | 2022-04-01 |
| Nuclei | Spring - Remote Code Execution |
Plus 75 more. The full list has every link.
History
| Recorded | Changed | Sources |
|---|---|---|
| affected_more, aliases | OSV | |
| affected | ||
| affected | OSV | |
| exploitation | ||
| affected | OSV | |
| affected | OSV | |
| exploits, exploits_more | ||
| affected, affected_more, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-22965 is a critical vulnerability (CVSS 9.8) in Vmware Spring Framework, published March 31, 2022. CISA lists it as known to be exploited, since April 4, 2022. EUVD reports exploitation since April 4, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.6%, the 99th percentile. Fixed in org.springframework:spring-beans 5.3.18.
References
tanzu.vmware.com/security/cve-2022-22965
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
oracle.com/security-alerts/cpuapr2022.html
psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
Show 21 moreShow less
kb.cert.org/vuls/id/970766
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
nvd.nist.gov/vuln/detail/CVE-2022-22965
github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
security-tracker.debian.org/tracker/CVE-2022-22965
ubuntu.com/security/CVE-2022-22965
bugalert.org/content/notices/2022-03-30-spring.html
cve.org/CVERecord?id=CVE-2022-22965
Left out here: 442 versions. The JSON record has them. Also not on the record: 112 package claims. ID and package lookups still check them.