{"id":"CVE-2020-5421","aliases":["CLSA-2025-1762906008","CLSA-2026-1785030424","CLSA-2026-1785815205","CLSA-2026-1790074038","CLSA-2026-1790857021","CLSA-2026-1790874046","CLSA-2026-1790878884","CLSA-2026-1792575333","CLSA-2026-1792590787","CLSA-2026-1792601519","CLSA-2026-1792604310","CLSA-2026-1792604538","CLSA-2026-1793057670","CLSA-2026-1793615948","CLSA-2026-1793616969","CLSA-2026-1793620971","CLSA-2026-1793885497","CLSA-2026-1794238635","DEBIAN-CVE-2020-5421","EUVD-2021-0875","GHSA-rv39-3qh7-9v7w","UBUNTU-CVE-2020-5421"],"status":"published","title":"RFD Protection Bypass via jsessionid","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","severity":{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.11564,"percentile":0.96087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-35"],"published":"2020-09-19T03:45:13Z","modified":"2026-11-09T19:15:14Z","exploits":[{"source":"pocgithub","id":"pandaMingx/CVE-2020-5421","title":"pandaMingx/CVE-2020-5421","date":"2021-01-10","url":"https://github.com/pandaMingx/CVE-2020-5421"}],"fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-framework-bom","fixed_in":["5.2.9","5.1.18","5.0.19","4.3.29"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","fixed_in":["5.2.8.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libspring-java","fixed_in":["4.3.30-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libspring-java","fixed_in":["4.3.30-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libspring-java","fixed_in":["4.3.30-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0"},{"last_affected":"5.2.8"},{"fixed":"5.2.9"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0"},{"last_affected":"5.1.17"},{"fixed":"5.1.18"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.18"},{"fixed":"5.0.19"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.29"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.6"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.1"}]}],"versions":["5.1.19.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.2"}]}],"versions":["5.2.8.RELEASE","5.2.8.RELEASE-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.2"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.2"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.2"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.3"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0"},{"fixed":"5.2.9"}]}],"versions":["5.2.0.RELEASE","5.2.1.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0"},{"fixed":"5.1.18"}]}],"versions":["5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.2.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.19"}]}],"versions":["5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.2.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.29"}]}],"versions":["3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.3.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"products":[{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"snap_creator_framework"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"oracle","product":"commerce_guided_search"},{"vendor":"oracle","product":"communications_brm"},{"vendor":"oracle","product":"communications_design_studio"},{"vendor":"oracle","product":"communications_session_report_manager"},{"vendor":"oracle","product":"communications_unified_inventory_management"},{"vendor":"oracle","product":"endeca_information_discovery_integrator"},{"vendor":"oracle","product":"enterprise_data_quality"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"flexcube_private_banking"},{"vendor":"oracle","product":"fusion_middleware"},{"vendor":"oracle","product":"goldengate_application_adapters"},{"vendor":"oracle","product":"healthcare_master_person_index"},{"vendor":"oracle","product":"hyperion_infrastructure_technology"},{"vendor":"oracle","product":"insurance_policy_administration"},{"vendor":"oracle","product":"insurance_rules_palette"},{"vendor":"oracle","product":"mysql_enterprise_monitor"},{"vendor":"oracle","product":"primavera_gateway"},{"vendor":"oracle","product":"primavera_p6_enterprise_project_portfolio_management"},{"vendor":"oracle","product":"retail_assortment_planning"},{"vendor":"oracle","product":"retail_bulk_data_integration"},{"vendor":"oracle","product":"retail_customer_engagement"},{"vendor":"oracle","product":"retail_customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"retail_financial_integration"},{"vendor":"oracle","product":"retail_integration_bus"},{"vendor":"oracle","product":"retail_invoice_matching"},{"vendor":"oracle","product":"retail_merchandising_system"},{"vendor":"oracle","product":"retail_order_broker"},{"vendor":"oracle","product":"retail_predictive_application_server"},{"vendor":"oracle","product":"retail_returns_management"},{"vendor":"oracle","product":"retail_service_backbone"},{"vendor":"oracle","product":"retail_xstore_point_of_service"},{"vendor":"oracle","product":"storagetek_acsls"},{"vendor":"oracle","product":"storagetek_tape_analytics_sw_tool"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"spring by vmware","product":"spring framework"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://tanzu.vmware.com/security/cve-2020-5421","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e%40%3Cdev.ranger.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a%40%3Cissues.ambari.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1%40%3Cdev.ambari.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a%40%3Cdev.ambari.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163%40%3Ccommits.ambari.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5%40%3Cissues.ambari.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074%40%3Cdev.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb%40%3Cuser.ignite.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d%40%3Cuser.ignite.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665%40%3Cissues.hive.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0009/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Not Applicable","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5421","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r1c679c43fa4f7846d748a937955c7921436d1b315445978254442163@%3Ccommits.ambari.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1eccdbd7986618a7319ee7a533bd9d9bf6e8678e59dd4cca9b5b2d7a@%3Cissues.ambari.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3589ed0d18edeb79028615080d5a0e8878856436bb91774a3196d9eb@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r503e64b43a57fd68229cac4a869d1a9a2eac9e75f8719cad3a840211@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5c95eff679dfc642e9e4ab5ac6d202248a59cb1e9457cfbe8b729ac5@%3Cissues.ambari.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7e6a213eea7f04fc6d9e3bd6eb8d68c4df92a22e956e95cb2c482865@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8b496b1743d128e6861ee0ed3c3c48cc56c505b38f84fa5baf7ae33a@%3Cdev.ambari.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r918caad55dcc640a16753b00d8d6acb90b4e36de4b6156d0867246ec@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9f13cccb214495e14648d2c9b8f2c6072fd5219e74502dd35ede81e1@%3Cdev.ambari.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra889d95141059c6cbe77dd80249bb488ae53b274b5f3abad09d9511d@%3Cuser.ignite.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/raf7ca57033e537e4f9d7df7f192fa6968c1e49409b2348e08d807ccb@%3Cuser.ignite.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb18ed999153ef0f0cb7af03efe0046c42c7242fd77fbd884a75ecfdc@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc9efaf6db98bee19db1bc911d0fa442287dac5cb229d4aaa08b6a13d@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd462a8b0dfab4c15e67c0672cd3c211ecd0e4f018f824082ed54f665@%3Cissues.hive.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re014a49d77f038ba70e5e9934d400af6653e8c9ac110d32b1254127e@%3Cdev.ranger.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf00d8f4101a1c1ea4de6ea1e09ddf7472cfd306745c90d6da87ae074@%3Cdev.hive.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rv39-3qh7-9v7w"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-5421","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0009","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-5421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-5421","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-5421","title":"RFD Protection Bypass via jsessionid","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T03:45:13.127Z","modified":"2026-10-08T21:03:32.847Z","cvss":[{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:47.877975Z"}],"euvd":[{"id":"EUVD-2021-0875","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T03:45:13Z","modified":"2026-10-08T21:03:32Z","cvss":[{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-rv39-3qh7-9v7w","title":"Improper Input Validation in Spring Framework","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2021-04-30T17:29:51Z","modified":"2023-08-13T05:02:01Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-35"],"updated_at":"2026-11-02T14:36:59.456342Z"}],"nvd":[{"id":"CVE-2020-5421","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T04:15:11.527Z","modified":"2026-10-08T21:17:30.567Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":3.6,"vector":"AV:N/AC:H/Au:S/C:P/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:15.83396Z"}],"osv":[{"id":"CVE-2020-5421","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T04:15:11.527Z","modified":"2026-10-24T10:30:57.100303745Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"DEBIAN-CVE-2020-5421","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T04:15:11.527Z","modified":"2026-10-26T12:02:49.949204025Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"GHSA-rv39-3qh7-9v7w","title":"Improper Input Validation in Spring Framework","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2021-04-30T17:29:51Z","modified":"2024-03-08T05:19:02.814884Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-35"],"updated_at":"2026-11-02T15:46:56.281047Z"},{"id":"UBUNTU-CVE-2020-5421","description":"In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","status":"published","published":"2020-09-19T04:15:00Z","modified":"2026-11-09T12:49:05.844611881Z","cvss":[{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"CLSA-2025-1762906008","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:06.085973092Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1785030424","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:49Z","modified":"2026-11-02T19:45:44.848387376Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785815205","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-11-02T19:45:49.917621697Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1790074038","title":"TuxCare security update for org.springframework (30 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4.","status":"published","published":"2026-09-22T10:47:18Z","modified":"2026-11-02T19:46:20.907661115Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790857021","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 25 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T12:17:01Z","modified":"2026-11-02T19:46:25.072257838Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790874046","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 9 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.6.","status":"published","published":"2026-10-01T17:00:46Z","modified":"2026-11-02T19:46:25.794200572Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790878884","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T18:21:24Z","modified":"2026-11-02T19:46:24.362652026Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1792575333","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T09:35:33Z","modified":"2026-11-02T19:46:29.583097776Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590787","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:53:07Z","modified":"2026-11-02T19:46:29.631616099Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792601519","title":"TuxCare security update for org.springframework:spring-framework-bom (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-framework-bom to address 1 CVE. Fixed in 5.2.8.RELEASE-tuxcare.2.","status":"published","published":"2026-10-21T16:51:59Z","modified":"2026-10-30T07:30:48.345989517Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792604310","title":"TuxCare security update for org.springframework:spring-framework-bom (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-framework-bom to address 1 CVE. Fixed in 5.1.3.RELEASE-tuxcare.2.","status":"published","published":"2026-10-21T17:38:30Z","modified":"2026-10-29T19:45:43.373574819Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792604538","title":"TuxCare security update for org.springframework:spring-framework-bom (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-framework-bom to address 1 CVE. Fixed in 5.0.19.RELEASE-tuxcare.2.","status":"published","published":"2026-10-21T17:42:18Z","modified":"2026-10-29T19:45:42.799004901Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1793057670","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 20 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.1.","status":"published","published":"2026-10-26T23:34:30Z","modified":"2026-11-02T19:46:31.727005747Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793615948","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 17 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T11:39:09Z","modified":"2026-11-02T19:46:33.374523015Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793616969","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 16 CVEs. Fixed in 5.2.9.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T11:56:10Z","modified":"2026-11-02T19:46:33.125808392Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793620971","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T13:02:51Z","modified":"2026-11-02T19:46:33.689179074Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793885497","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 13 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T14:31:38Z","modified":"2026-11-06T13:15:20.810473169Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794238635","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-11-09T16:37:16Z","modified":"2026-11-09T19:15:14.55405795Z","updated_at":"2026-11-09T19:38:09.278998Z"}]}}