{"id":"CVE-2022-22950","aliases":["CLSA-2025-1756771563","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2026-1774916754","CLSA-2026-1776040408","CLSA-2026-1776040412","CLSA-2026-1776213242","CLSA-2026-1777250295","CLSA-2026-1777509606","CLSA-2026-1777941826","CLSA-2026-1779842933","CLSA-2026-1782867606","CLSA-2026-1784769547","CLSA-2026-1784769551","CLSA-2026-1785957138","CLSA-2026-1785959911","CLSA-2026-1786342108","CLSA-2026-1786611721","CLSA-2026-1787313469","CLSA-2026-1789380988","CLSA-2026-1790157664","CLSA-2026-1790878884","CLSA-2026-1791213084","CLSA-2026-1791218458","CLSA-2026-1792575333","CLSA-2026-1792591113","CLSA-2026-1793095557","CLSA-2026-1793103567","CLSA-2026-1793104869","CLSA-2026-1793107019","CLSA-2026-1793202493","CLSA-2026-1793615948","CLSA-2026-1793635118","CLSA-2026-1793636640","CLSA-2026-1793637145","CLSA-2026-1793883499","CLSA-2026-1793884148","CLSA-2026-1793884738","CLSA-2026-1794178070","DEBIAN-CVE-2022-22950","EUVD-2022-1628","GHSA-558x-2xjg-6232","OESA-2025-1557","RHSA-2022:5555","UBUNTU-CVE-2022-22950"],"status":"published","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.36909,"percentile":0.98521,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2022-04-01T22:17:32Z","modified":"2026-11-09T01:45:04Z","fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-expression","fixed_in":["5.3.17","5.2.20.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","fixed_in":["5.2.13.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","4.3.20.RELEASE-tuxcare.2","5.1.19.RELEASE-tuxcare.3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"springframework","fixed_in":["3.2.18-14.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"springframework","fixed_in":["3.2.18-14.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"springframework","fixed_in":["3.2.18-15.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"springframework","fixed_in":["3.2.18-15.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"springframework","fixed_in":["3.2.18-13.oe2003sp4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.17"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.2"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.3"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.2"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.2"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.2"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.3"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.3"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.3"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.3"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.3"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.3"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.3"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.1"}]}],"versions":["4.3.26.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.1"}]}],"versions":["5.3.15"],"bundled":31},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.3"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.3"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.3"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.20.RELEASE"},{"fixed":"4.3.20.RELEASE-tuxcare.2"}]}],"versions":["4.3.20.RELEASE","4.3.20.RELEASE-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.2"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.2"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.2"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.2"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.3"}]}],"versions":["5.1.19.RELEASE","5.1.19.RELEASE-tuxcare.1","5.1.19.RELEASE-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.16.RELEASE"},{"fixed":"4.3.16.RELEASE-tuxcare.2"}]}],"versions":["4.3.16.RELEASE","4.3.16.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.16.RELEASE"},{"fixed":"4.3.16.RELEASE-tuxcare.2"}]}],"versions":["4.3.16.RELEASE","4.3.16.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.16.RELEASE"},{"fixed":"4.3.16.RELEASE-tuxcare.2"}]}],"versions":["4.3.16.RELEASE","4.3.16.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.3"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5.RELEASE"},{"fixed":"4.3.5.RELEASE-tuxcare.2"}]}],"versions":["4.3.5.RELEASE","4.3.5.RELEASE-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5.RELEASE"},{"fixed":"4.3.5.RELEASE-tuxcare.2"}]}],"versions":["4.3.5.RELEASE","4.3.5.RELEASE-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5.RELEASE"},{"fixed":"4.3.5.RELEASE-tuxcare.2"}]}],"versions":["4.3.5.RELEASE","4.3.5.RELEASE-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5.RELEASE"},{"fixed":"4.3.5.RELEASE-tuxcare.2"}]}],"versions":["4.3.5.RELEASE","4.3.5.RELEASE-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.5.RELEASE"},{"fixed":"4.3.5.RELEASE-tuxcare.2"}]}],"versions":["4.3.5.RELEASE","4.3.5.RELEASE-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.17"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}],"versions":["3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"springframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.18-14.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"springframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.18-14.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"springframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.18-15.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"springframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.18-15.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"springframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.18-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-web-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.0-1.el8ev"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-dependencies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2-1.el8ev"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"apache-commons-compress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21-1.2.el8ev"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"apache-commons-compress-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21-1.2.el8ev"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":43,"products":[{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://tanzu.vmware.com/security/cve-2022-22950","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22950","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/issues/28145","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/issues/28257","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17","tags":["web"]},{"url":"https://github.com/advisories/GHSA-558x-2xjg-6232"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/22xxx/CVE-2022-22950.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-22950","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1557","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5555","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2093795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5555.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3807","tags":["advisory"]},{"url":"https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33623","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35515","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/07/13/1","tags":["article"]},{"url":"https://commons.apache.org/proper/commons-compress/security-reports.html","tags":["article"]},{"url":"https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab%40%3Cuser.commons.apache.org%3E","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35516","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/07/13/2","tags":["article"]},{"url":"https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca%40%3Cuser.commons.apache.org%3E","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35517","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/07/13/3","tags":["article"]},{"url":"https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53ac6968f667f2c249b6fbabada9a940%40%3Cuser.commons.apache.org%3E","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36090","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/07/13/4","tags":["article"]},{"url":"https://lists.apache.org/thread.html/rc4134026d7d7b053d4f9f2205531122732405012c8804fd850a9b26f%40%3Cuser.commons.apache.org%3E","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22950","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22950","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31051","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31051","tags":["advisory"]},{"url":"https://github.com/semantic-release/semantic-release/security/advisories/GHSA-x2pg-mjhr-2m5x","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2022-22950","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T22:17:32Z","modified":"2026-10-08T21:03:30.574Z","cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-1628","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T22:17:32Z","modified":"2026-10-08T21:03:30Z","updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-558x-2xjg-6232","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-03T00:01:00Z","modified":"2023-03-28T22:26:11Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:36:48.905887Z"}],"nvd":[{"id":"CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T23:15:13.45Z","modified":"2026-10-08T21:17:44.243Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:14.706146Z"}],"osv":[{"id":"DEBIAN-CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T23:15:13.45Z","modified":"2026-11-03T08:03:49.83582427Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"GHSA-558x-2xjg-6232","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-03T00:01:00Z","modified":"2023-11-08T04:08:14.87322Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"OESA-2025-1557","title":"springframework security update","description":"The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.\r\n\r\nSecurity Fix(es):\n\nn Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.(CVE-2022-22950)","status":"published","published":"2025-05-23T11:08:39Z","modified":"2026-08-18T01:17:59.084610915Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2022:5555","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.1] security, bug fix and update","status":"published","published":"2024-09-20T15:11:25Z","modified":"2026-10-14T10:02:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"UBUNTU-CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T23:15:00Z","modified":"2026-10-17T12:56:01.843455752Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774916754","title":"TuxCare security update for org.springframework:spring-expression (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-11-02T19:45:15.877784822Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776040408","title":"TuxCare security update for org.springframework:spring-expression (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-11-02T19:45:24.31261256Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776040412","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-11-02T19:45:23.931874136Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776213242","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:23.335793729Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777250295","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-11-02T19:45:28.348885071Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777509606","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:28.07523245Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777941826","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-02T19:45:25.95820547Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1779842933","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:33Z","modified":"2026-11-02T19:45:32.911143955Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1782867606","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-11-02T19:45:39.141905603Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784769547","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:46.421144185Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1784769551","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:44.897974185Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785957138","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.","status":"published","published":"2026-08-05T19:12:18Z","modified":"2026-11-02T19:45:51.344685565Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785959911","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.3.","status":"published","published":"2026-08-05T19:58:31Z","modified":"2026-11-02T19:45:49.017500599Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786342108","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3.","status":"published","published":"2026-08-10T06:08:28Z","modified":"2026-11-02T19:45:51.410671845Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786611721","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.3.","status":"published","published":"2026-08-13T09:02:01Z","modified":"2026-11-02T19:45:53.420562158Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787313469","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3.","status":"published","published":"2026-08-21T11:57:49Z","modified":"2026-11-02T19:46:01.026990018Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1789380988","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.","status":"published","published":"2026-09-14T10:16:28Z","modified":"2026-11-02T19:46:15.379985029Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1790157664","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.","status":"published","published":"2026-09-23T10:01:04Z","modified":"2026-11-02T19:46:22.541585796Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790878884","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T18:21:24Z","modified":"2026-11-02T19:46:24.362652026Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791213084","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T15:11:24Z","modified":"2026-11-02T19:46:26.002316843Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218458","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:40:58Z","modified":"2026-11-02T19:46:26.143363772Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1792575333","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T09:35:33Z","modified":"2026-11-02T19:46:29.583097776Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792591113","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.","status":"published","published":"2026-10-21T13:58:33Z","modified":"2026-11-02T19:46:29.678370863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793095557","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.13-tuxcare.3.","status":"published","published":"2026-10-27T10:05:57Z","modified":"2026-11-02T19:46:32.190286675Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793103567","title":"TuxCare security update for org.springframework:spring-expression (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 4.3.20.RELEASE-tuxcare.2.","status":"published","published":"2026-10-27T12:19:27Z","modified":"2026-11-02T19:46:32.071086911Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793104869","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.2.","status":"published","published":"2026-10-27T12:41:09Z","modified":"2026-11-02T19:46:32.059310336Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793107019","title":"TuxCare security update for org.springframework:spring-expression (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.1.19.RELEASE-tuxcare.3.","status":"published","published":"2026-10-27T13:16:59Z","modified":"2026-11-02T19:46:32.003188531Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793202493","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.2.","status":"published","published":"2026-10-28T15:48:13Z","modified":"2026-11-02T19:46:32.966864035Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793615948","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 17 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T11:39:09Z","modified":"2026-11-02T19:46:33.374523015Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793635118","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T16:58:39Z","modified":"2026-11-02T19:46:33.67718623Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793636640","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T17:24:01Z","modified":"2026-11-02T19:46:33.677604041Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793637145","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T17:32:26Z","modified":"2026-11-02T19:46:33.691385806Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793883499","title":"TuxCare security update for org.springframework (18 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 18 CVEs. Fixed in 5.2.8.RELEASE-tuxcare.3.","status":"published","published":"2026-11-05T13:58:20Z","modified":"2026-11-06T13:15:13.169324833Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793884148","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.3-tuxcare.4.","status":"published","published":"2026-11-05T14:09:09Z","modified":"2026-11-06T13:15:21.610344433Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793884738","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.3.5-tuxcare.3.","status":"published","published":"2026-11-05T14:18:59Z","modified":"2026-11-06T13:15:21.600459691Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794178070","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.3.6-tuxcare.3.","status":"published","published":"2026-11-08T23:47:51Z","modified":"2026-11-09T01:45:04.248565523Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CVE-2022-22950","description":"n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.","status":"published","published":"2022-04-01T22:17:32Z","modified":"2026-10-28T02:31:05.661614998Z","cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:24.061177Z"}]}}