{"id":"CVE-2022-22965","aliases":["CLSA-2025-1752019358","CLSA-2025-1756771563","CLSA-2025-1758845168","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2025-1762906008","CLSA-2026-1774311639","CLSA-2026-1774916751","CLSA-2026-1776213242","CLSA-2026-1777941826","CLSA-2026-1781571260","CLSA-2026-1782867606","CLSA-2026-1784509762","CLSA-2026-1785030424","CLSA-2026-1785204448","CLSA-2026-1785380133","CLSA-2026-1785380233","CLSA-2026-1785380498","CLSA-2026-1785814744","CLSA-2026-1785815205","CLSA-2026-1786609560","CLSA-2026-1789380988","CLSA-2026-1789427454","CLSA-2026-1790102819","CLSA-2026-1790157664","CLSA-2026-1790233969","CLSA-2026-1790234139","CLSA-2026-1790234279","CLSA-2026-1790878884","CLSA-2026-1791107509","CLSA-2026-1791218487","CLSA-2026-1791289094","CLSA-2026-1792575333","CLSA-2026-1792590655","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1793615375","CLSA-2026-1793616969","CLSA-2026-1793632081","CLSA-2026-1793635118","CLSA-2026-1793883499","CLSA-2026-1793884148","CLSA-2026-1793897029","CLSA-2026-1794251616","DEBIAN-CVE-2022-22965","EUVD-2022-1283","GHSA-36p3-wjmg-h94x","UBUNTU-CVE-2022-22965","USN-7165-1"],"status":"published","title":"Remote Code Execution in Spring Framework","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.99638,"percentile":0.99949,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-74","CWE-94"],"published":"2022-03-31T18:30:50Z","modified":"2026-11-10T01:15:03Z","kev":{"date_added":"2022-04-04","due_date":"2022-04-25","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-04-04"},{"source":"kev","since":"2022-04-04"}],"exploits":[{"source":"pocgithub","id":"BobTheShoplifter/Spring4Shell-POC","title":"BobTheShoplifter/Spring4Shell-POC","date":"2022-03-30","url":"https://github.com/BobTheShoplifter/Spring4Shell-POC"},{"source":"pocgithub","id":"Mr-xn/spring-core-rce","title":"Mr-xn/spring-core-rce","date":"2022-03-30","url":"https://github.com/Mr-xn/spring-core-rce"},{"source":"pocgithub","id":"TheGejr/SpringShell","title":"TheGejr/SpringShell","date":"2022-03-30","url":"https://github.com/TheGejr/SpringShell"},{"source":"pocgithub","id":"Bouquets-ai/CVE-2022-22965-GUItools","title":"Bouquets-ai/CVE-2022-22965-GUItools","date":"2022-03-31","url":"https://github.com/Bouquets-ai/CVE-2022-22965-GUItools"},{"source":"pocgithub","id":"DDuarte/springshell-rce-poc","title":"DDuarte/springshell-rce-poc","date":"2022-03-31","url":"https://github.com/DDuarte/springshell-rce-poc"},{"source":"pocgithub","id":"FourCoreLabs/spring4shell-exploit-poc","title":"FourCoreLabs/spring4shell-exploit-poc","date":"2022-03-31","url":"https://github.com/FourCoreLabs/spring4shell-exploit-poc"},{"source":"pocgithub","id":"GuayoyoCyber/CVE-2022-22965","title":"GuayoyoCyber/CVE-2022-22965","date":"2022-03-31","url":"https://github.com/GuayoyoCyber/CVE-2022-22965"},{"source":"pocgithub","id":"Kirill89/CVE-2022-22965-PoC","title":"Kirill89/CVE-2022-22965-PoC","date":"2022-03-31","url":"https://github.com/Kirill89/CVE-2022-22965-PoC"},{"source":"pocgithub","id":"alt3kx/CVE-2022-22965_PoC","title":"alt3kx/CVE-2022-22965_PoC","date":"2022-03-31","url":"https://github.com/alt3kx/CVE-2022-22965_PoC"},{"source":"pocgithub","id":"colincowie/Safer_PoC_CVE-2022-22965","title":"colincowie/Safer_PoC_CVE-2022-22965","date":"2022-03-31","url":"https://github.com/colincowie/Safer_PoC_CVE-2022-22965"},{"source":"metasploit","id":"exploit/multi/http/spring_framework_rce_spring4shell","title":"Spring Framework Class property RCE (Spring4Shell)","type":"exploit","platform":"Linux,Windows","date":"2022-03-31","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/spring_framework_rce_spring4shell"},{"source":"pocgithub","id":"k3rwin/spring-core-rce","title":"k3rwin/spring-core-rce","date":"2022-03-31","url":"https://github.com/k3rwin/spring-core-rce"},{"source":"pocgithub","id":"liangyueliangyue/spring-core-rce","title":"liangyueliangyue/spring-core-rce","date":"2022-03-31","url":"https://github.com/liangyueliangyue/spring-core-rce"},{"source":"pocgithub","id":"reznok/Spring4Shell-POC","title":"reznok/Spring4Shell-POC","date":"2022-03-31","url":"https://github.com/reznok/Spring4Shell-POC"},{"source":"pocgithub","id":"rwincey/spring4shell-CVE-2022-22965","title":"rwincey/spring4shell-CVE-2022-22965","date":"2022-03-31","url":"https://github.com/rwincey/spring4shell-CVE-2022-22965"},{"source":"pocgithub","id":"viniciuspereiras/CVE-2022-22965-poc","title":"viniciuspereiras/CVE-2022-22965-poc","date":"2022-03-31","url":"https://github.com/viniciuspereiras/CVE-2022-22965-poc"},{"source":"pocgithub","id":"Joe1sn/CVE-2022-22965","title":"Joe1sn/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/Joe1sn/CVE-2022-22965"},{"source":"pocgithub","id":"SecNN/SpringFramework_CVE-2022-22965_RCE","title":"SecNN/SpringFramework_CVE-2022-22965_RCE","date":"2022-04-01","url":"https://github.com/SecNN/SpringFramework_CVE-2022-22965_RCE"},{"source":"pocgithub","id":"helsecert/CVE-2022-22965","title":"helsecert/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/helsecert/CVE-2022-22965"},{"source":"pocgithub","id":"lcarea/CVE-2022-22965","title":"lcarea/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/lcarea/CVE-2022-22965"},{"source":"pocgithub","id":"likewhite/CVE-2022-22965","title":"likewhite/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/likewhite/CVE-2022-22965"},{"source":"pocgithub","id":"me2nuk/CVE-2022-22965","title":"me2nuk/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/me2nuk/CVE-2022-22965"},{"source":"pocgithub","id":"mebibite/springhound","title":"mebibite/springhound","date":"2022-04-01","url":"https://github.com/mebibite/springhound"},{"source":"pocgithub","id":"nu0l/CVE-2022-22965","title":"nu0l/CVE-2022-22965","date":"2022-04-01","url":"https://github.com/nu0l/CVE-2022-22965"},{"source":"pocgithub","id":"snicoll-scratches/spring-boot-cve-2022-22965","title":"snicoll-scratches/spring-boot-cve-2022-22965","date":"2022-04-01","url":"https://github.com/snicoll-scratches/spring-boot-cve-2022-22965"},{"source":"pocgithub","id":"tangxiaofeng7/CVE-2022-22965-Spring-Core-Rce","title":"tangxiaofeng7/CVE-2022-22965-Spring-Core-Rce","date":"2022-04-01","url":"https://github.com/tangxiaofeng7/CVE-2022-22965-Spring-Core-Rce"},{"source":"nuclei","id":"CVE-2022-22965","title":"Spring - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22965.yaml"}],"exploits_more":75,"fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-beans","fixed_in":["5.3.18","5.2.20.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.springframework:spring-webmvc","fixed_in":["5.3.18","5.2.20.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-web","fixed_in":["2.5.12","2.6.6"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.springframework:spring-webflux","fixed_in":["5.3.18","5.2.20.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-webflux","fixed_in":["2.5.12","2.6.6"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","fixed_in":["4.1.7.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","fixed_in":["4.1.7.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","fixed_in":["4.3.22-1~18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","fixed_in":["4.3.22-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","fixed_in":["4.3.30-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","fixed_in":["4.3.30-2ubuntu0.24.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libspring-java","fixed_in":["4.3.30-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"2.6.6"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"2.6.6"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator-autoconfigure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-autoconfigure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.6"},{"fixed":"2.4.6.tuxcare.2"}]}],"versions":["2.4.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.1"}]}],"versions":["4.1.7.RELEASE"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.1"}]}],"versions":["4.1.7.RELEASE"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.3"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.3"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.8"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.2"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.2"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.2"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.2"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.2"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.1"}]}],"versions":["4.3.25.RELEASE"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.1"}]}],"versions":["4.3.25.RELEASE"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.1"}]}],"versions":["4.3.25.RELEASE"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.2"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.2"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.2"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.2"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.2"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.2"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.5"},{"fixed":"5.3.5-tuxcare.1"}]}],"versions":["5.3.5"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.1"}]}],"versions":["5.2.10.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.15.RELEASE"},{"fixed":"5.2.15.RELEASE-tuxcare.1"}]}],"versions":["5.2.15.RELEASE"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.2"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}],"versions":["1.0","1.0-m4","1.0-rc1","1.0.1","1.2","1.2-rc1","1.2-rc2","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0","2.0-m1","2.0-m2","2.0-m3","2.0-m4","2.0-m5","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.5","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.6.SEC01","2.5.6.SEC02","2.5.6.SEC03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}],"versions":["1.0","1.0-rc1","1.0.1","1.1","1.1-rc1","1.1-rc2","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.2","1.2-rc1","1.2-rc2","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0","2.0-m1","2.0-m2","2.0-m3","2.0-m4","2.0-m5","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.5","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.6.SEC01","2.5.6.SEC02","2.5.6.SEC03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12"}]}],"versions":["1.0.0.RELEASE","1.0.1.RELEASE","1.0.2.RELEASE","1.1.0.RELEASE","1.1.1.RELEASE","1.1.10.RELEASE","1.1.11.RELEASE","1.1.12.RELEASE","1.1.2.RELEASE","1.1.3.RELEASE","1.1.4.RELEASE","1.1.5.RELEASE","1.1.6.RELEASE","1.1.7.RELEASE","1.1.8.RELEASE","1.1.9.RELEASE","1.2.0.RELEASE","1.2.1.RELEASE","1.2.2.RELEASE","1.2.3.RELEASE","1.2.4.RELEASE","1.2.5.RELEASE","1.2.6.RELEASE","1.2.7.RELEASE","1.2.8.RELEASE","1.3.0.RELEASE","1.3.1.RELEASE","1.3.2.RELEASE","1.3.3.RELEASE","1.3.4.RELEASE","1.3.5.RELEASE","1.3.6.RELEASE","1.3.7.RELEASE","1.3.8.RELEASE","1.4.0.RELEASE","1.4.1.RELEASE","1.4.2.RELEASE","1.4.3.RELEASE","1.4.4.RELEASE","1.4.5.RELEASE","1.4.6.RELEASE","1.4.7.RELEASE","1.5.0.RELEASE","1.5.1.RELEASE","1.5.10.RELEASE","1.5.11.RELEASE","1.5.12.RELEASE","1.5.13.RELEASE","1.5.14.RELEASE","1.5.15.RELEASE","1.5.16.RELEASE","1.5.17.RELEASE","1.5.18.RELEASE","1.5.19.RELEASE","1.5.2.RELEASE","1.5.20.RELEASE","1.5.21.RELEASE","1.5.22.RELEASE","1.5.3.RELEASE","1.5.4.RELEASE","1.5.5.RELEASE","1.5.6.RELEASE","1.5.7.RELEASE","1.5.8.RELEASE","1.5.9.RELEASE","2.0.0.RELEASE","2.0.1.RELEASE","2.0.2.RELEASE","2.0.3.RELEASE","2.0.4.RELEASE","2.0.5.RELEASE","2.0.6.RELEASE","2.0.7.RELEASE","2.0.8.RELEASE","2.0.9.RELEASE","2.1.0.RELEASE","2.1.1.RELEASE","2.1.10.RELEASE","2.1.11.RELEASE","2.1.12.RELEASE","2.1.13.RELEASE","2.1.14.RELEASE","2.1.15.RELEASE","2.1.16.RELEASE","2.1.17.RELEASE","2.1.18.RELEASE","2.1.2.RELEASE","2.1.3.RELEASE","2.1.4.RELEASE","2.1.5.RELEASE","2.1.6.RELEASE","2.1.7.RELEASE","2.1.8.RELEASE","2.1.9.RELEASE","2.2.0.RELEASE","2.2.1.RELEASE","2.2.10.RELEASE","2.2.11.RELEASE","2.2.12.RELEASE","2.2.13.RELEASE","2.2.2.RELEASE","2.2.3.RELEASE","2.2.4.RELEASE","2.2.5.RELEASE","2.2.6.RELEASE","2.2.7.RELEASE","2.2.8.RELEASE","2.2.9.RELEASE","2.3.0.RELEASE","2.3.1.RELEASE","2.3.10.RELEASE","2.3.11.RELEASE","2.3.12.RELEASE","2.3.2.RELEASE","2.3.3.RELEASE","2.3.4.RELEASE","2.3.5.RELEASE","2.3.6.RELEASE","2.3.7.RELEASE","2.3.8.RELEASE","2.3.9.RELEASE","2.4.0","2.4.1","2.4.10","2.4.11","2.4.12","2.4.13","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.4.9","2.5.0","2.5.1","2.5.10","2.5.11","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.7","2.5.8","2.5.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"2.6.6"}]}],"versions":["2.6.0","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20.RELEASE"}]}],"versions":["5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.18"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12"}]}],"versions":["2.0.0.RELEASE","2.0.1.RELEASE","2.0.2.RELEASE","2.0.3.RELEASE","2.0.4.RELEASE","2.0.5.RELEASE","2.0.6.RELEASE","2.0.7.RELEASE","2.0.8.RELEASE","2.0.9.RELEASE","2.1.0.RELEASE","2.1.1.RELEASE","2.1.10.RELEASE","2.1.11.RELEASE","2.1.12.RELEASE","2.1.13.RELEASE","2.1.14.RELEASE","2.1.15.RELEASE","2.1.16.RELEASE","2.1.17.RELEASE","2.1.18.RELEASE","2.1.2.RELEASE","2.1.3.RELEASE","2.1.4.RELEASE","2.1.5.RELEASE","2.1.6.RELEASE","2.1.7.RELEASE","2.1.8.RELEASE","2.1.9.RELEASE","2.2.0.RELEASE","2.2.1.RELEASE","2.2.10.RELEASE","2.2.11.RELEASE","2.2.12.RELEASE","2.2.13.RELEASE","2.2.2.RELEASE","2.2.3.RELEASE","2.2.4.RELEASE","2.2.5.RELEASE","2.2.6.RELEASE","2.2.7.RELEASE","2.2.8.RELEASE","2.2.9.RELEASE","2.3.0.RELEASE","2.3.1.RELEASE","2.3.10.RELEASE","2.3.11.RELEASE","2.3.12.RELEASE","2.3.2.RELEASE","2.3.3.RELEASE","2.3.4.RELEASE","2.3.5.RELEASE","2.3.6.RELEASE","2.3.7.RELEASE","2.3.8.RELEASE","2.3.9.RELEASE","2.4.0","2.4.1","2.4.10","2.4.11","2.4.12","2.4.13","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.4.9","2.5.0","2.5.1","2.5.10","2.5.11","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.7","2.5.8","2.5.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.0"},{"fixed":"2.6.6"}]}],"versions":["2.6.0","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-1~18.04.1~esm1"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-4ubuntu0.1~esm1"}]}],"versions":["4.3.22-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-1ubuntu0.1~esm1"}]}],"versions":["4.3.30-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-2ubuntu0.24.04.1~esm1"}]}],"versions":["4.3.30-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-2ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-1~18.04.1~esm1"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-4ubuntu0.1~esm1"}]}],"versions":["4.3.22-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-1ubuntu0.1~esm1"}]}],"versions":["4.3.30-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-2ubuntu0.24.04.1~esm1"}]}],"versions":["4.3.30-2"]}],"affected_more":117,"products":[{"vendor":"cisco","product":"cx_cloud_agent"},{"vendor":"oracle","product":"commerce_platform"},{"vendor":"oracle","product":"communications_cloud_native_core_automated_test_suite"},{"vendor":"oracle","product":"communications_cloud_native_core_binding_support_function"},{"vendor":"oracle","product":"communications_cloud_native_core_console"},{"vendor":"oracle","product":"communications_cloud_native_core_network_exposure_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment"},{"vendor":"oracle","product":"communications_cloud_native_core_network_repository_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_cloud_native_core_policy"},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_unified_data_repository"},{"vendor":"oracle","product":"communications_policy_management"},{"vendor":"oracle","product":"communications_unified_inventory_management"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"financial_services_behavior_detection_platform"},{"vendor":"oracle","product":"financial_services_enterprise_case_management"},{"vendor":"oracle","product":"mysql_enterprise_monitor"},{"vendor":"oracle","product":"product_lifecycle_analytics"},{"vendor":"oracle","product":"retail_bulk_data_integration"},{"vendor":"oracle","product":"retail_customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"retail_financial_integration"},{"vendor":"oracle","product":"retail_integration_bus"},{"vendor":"oracle","product":"retail_merchandising_system"},{"vendor":"oracle","product":"retail_xstore_point_of_service"},{"vendor":"oracle","product":"sd-wan_edge"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"siemens","product":"operation_scheduler"},{"vendor":"siemens","product":"simatic_speech_assistant_for_machines"},{"vendor":"siemens","product":"sinec_network_management_system"},{"vendor":"siemens","product":"sipass_integrated"},{"vendor":"siemens","product":"siveillance_identity"},{"vendor":"veritas","product":"access_appliance"},{"vendor":"veritas","product":"flex_appliance"},{"vendor":"veritas","product":"netbackup_appliance"},{"vendor":"veritas","product":"netbackup_flex_scale_appliance"},{"vendor":"veritas","product":"netbackup_virtual_appliance"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://tanzu.vmware.com/security/cve-2022-22965","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory","web","report"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web"]},{"url":"http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web"]},{"url":"http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"https://www.kb.cert.org/vuls/id/970766","tags":["US Government Resource","web"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22965","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15","tags":["web"]},{"url":"https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12","tags":["web"]},{"url":"https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18","tags":["web"]},{"url":"https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-36p3-wjmg-h94x"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/22xxx/CVE-2022-22965.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-22965","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2022-22965","tags":["report"]},{"url":"https://bugalert.org/content/notices/2022-03-30-spring.html","tags":["report"]},{"url":"https://github.com/spring-projects/spring-framework/issues/28260","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22965","tags":["report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7165-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-22965","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T22:17:30Z","modified":"2025-10-21T23:15:42.792Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-1283","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T22:17:30Z","modified":"2025-10-21T23:15:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-04-04","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-36p3-wjmg-h94x","title":"Remote Code Execution in Spring Framework","description":"Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as `Spring4Shell`. \n\n## Impact\n\nA Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.\n\nThese are the prerequisites for the exploit:\n- JDK 9 or higher\n- Apache Tomcat as the Servlet container\n- Packaged as WAR\n- `spring-webmvc` or `spring-webflux` dependency\n\n## Patches\n\n- Spring Framework [5.3.18](https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18) and [5.2.20](https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE)\n- Spring Boot [2.6.6](https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6) and [2.5.12](https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12)\n\n## Workarounds\n\nFor those who are unable to upgrade, leaked reports recommend setting `disallowedFields` on `WebDataBinder` through an `@ControllerAdvice`. This works generally, but as a centrally applied workaround fix, may leave some loopholes, in particular if a controller sets `disallowedFields` locally through its own `@InitBinder` method, which overrides the global setting.\n\nTo apply the workaround in a more fail-safe way, applications could extend `RequestMappingHandlerAdapter` to update the `WebDataBinder` at the end after all other initialization. In order to do that, a Spring Boot application can declare a `WebMvcRegistrations` bean (Spring MVC) or a `WebFluxRegistrations` bean (Spring WebFlux).","status":"published","published":"2022-03-31T18:30:50Z","modified":"2025-10-22T19:18:35Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H","level":"critical"}],"cwes":["CWE-74","CWE-94"],"updated_at":"2026-11-02T14:39:02.474737Z"}],"kev":[{"id":"CVE-2022-22965","title":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","description":"Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","cwes":["CWE-94"],"kev":{"date_added":"2022-04-04","due_date":"2022-04-25","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2022-22965","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T23:15:13.87Z","modified":"2026-06-17T04:29:15.61Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:07:14.706146Z"}],"osv":[{"id":"CVE-2022-22965","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T22:17:30Z","modified":"2026-10-28T02:30:23.923099396Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DEBIAN-CVE-2022-22965","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T23:15:13.87Z","modified":"2026-11-03T08:02:10.970897024Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"GHSA-36p3-wjmg-h94x","title":"Remote Code Execution in Spring Framework","description":"Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as `Spring4Shell`. \n\n## Impact\n\nA Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.\n\nThese are the prerequisites for the exploit:\n- JDK 9 or higher\n- Apache Tomcat as the Servlet container\n- Packaged as WAR\n- `spring-webmvc` or `spring-webflux` dependency\n\n## Patches\n\n- Spring Framework [5.3.18](https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18) and [5.2.20](https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE)\n- Spring Boot [2.6.6](https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6) and [2.5.12](https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12)\n\n## Workarounds\n\nFor those who are unable to upgrade, leaked reports recommend setting `disallowedFields` on `WebDataBinder` through an `@ControllerAdvice`. This works generally, but as a centrally applied workaround fix, may leave some loopholes, in particular if a controller sets `disallowedFields` locally through its own `@InitBinder` method, which overrides the global setting.\n\nTo apply the workaround in a more fail-safe way, applications could extend `RequestMappingHandlerAdapter` to update the `WebDataBinder` at the end after all other initialization. In order to do that, a Spring Boot application can declare a `WebMvcRegistrations` bean (Spring MVC) or a `WebFluxRegistrations` bean (Spring WebFlux).","status":"published","published":"2022-03-31T18:30:50Z","modified":"2025-10-22T19:34:48.935927Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H","level":"critical"}],"cwes":["CWE-74","CWE-94"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"UBUNTU-CVE-2022-22965","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","status":"published","published":"2022-04-01T23:15:00Z","modified":"2026-02-04T02:28:15.513556Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2025-1752019358","title":"TuxCare security update for org.springframework.boot (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework.boot packages to address 5 CVEs. Fixed in 2.4.6.tuxcare.2.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-11-02T19:45:08.58239774Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1758845168","title":"TuxCare security update for org.springframework (1 CVE)","description":"TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 4.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.422375581Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906008","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:06.085973092Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774311639","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-11-02T19:45:18.308143007Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774916751","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-11-02T19:45:17.426870197Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776213242","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:23.335793729Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777941826","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-02T19:45:25.95820547Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1781571260","title":"TuxCare security update for org.springframework (1 CVE)","description":"TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 4.2.9.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:35.606030534Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1782867606","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-11-02T19:45:39.141905603Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784509762","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.8.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-11-02T19:45:43.461090164Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785030424","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:49Z","modified":"2026-11-02T19:45:44.848387376Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785204448","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-11-02T19:45:47.168301409Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785380133","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-11-02T19:45:47.859091627Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785380233","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-11-02T19:45:47.861873457Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785380498","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-11-02T19:45:48.296732908Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785814744","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-11-02T19:45:48.950547253Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785815205","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-11-02T19:45:49.917621697Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786609560","title":"TuxCare security update for org.grails (18 CVEs)","description":"TuxCare rebuilt 33 org.grails packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.","status":"withdrawn","published":"2026-08-13T08:26:00Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1789380988","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.","status":"published","published":"2026-09-14T10:16:28Z","modified":"2026-11-02T19:46:15.379985029Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1789427454","title":"TuxCare security update for org.springframework (18 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.","status":"published","published":"2026-09-14T23:10:54Z","modified":"2026-11-02T19:46:16.037836811Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1790102819","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 5.3.5-tuxcare.1.","status":"published","published":"2026-09-22T18:46:59Z","modified":"2026-11-02T19:46:20.237563172Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790157664","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1.","status":"published","published":"2026-09-23T10:01:04Z","modified":"2026-11-02T19:46:22.541585796Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790233969","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 23 CVEs. Fixed in 5.2.15.RELEASE-tuxcare.1.","status":"published","published":"2026-09-24T07:12:49Z","modified":"2026-11-02T19:46:22.824234461Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790234139","title":"TuxCare security update for org.springframework (22 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 22 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.2.","status":"published","published":"2026-09-24T07:15:39Z","modified":"2026-11-02T19:46:22.480045623Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790234279","title":"TuxCare security update for org.springframework (27 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 27 CVEs. Fixed in 5.2.17.RELEASE-tuxcare.1.","status":"published","published":"2026-09-24T07:17:59Z","modified":"2026-11-02T19:46:21.76882388Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790878884","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T18:21:24Z","modified":"2026-11-02T19:46:24.362652026Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791107509","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-10-04T09:51:49Z","modified":"2026-11-02T19:46:26.18760799Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218487","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:41:27Z","modified":"2026-11-02T19:46:26.185897679Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791289094","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.","status":"published","published":"2026-10-06T12:18:14Z","modified":"2026-11-02T19:46:26.292239404Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1792575333","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T09:35:33Z","modified":"2026-11-02T19:46:29.583097776Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590655","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:50:55Z","modified":"2026-11-02T19:46:30.234656173Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590787","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:53:07Z","modified":"2026-11-02T19:46:29.631616099Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792591113","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.","status":"published","published":"2026-10-21T13:58:33Z","modified":"2026-11-02T19:46:29.678370863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793615375","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T11:29:35Z","modified":"2026-11-02T19:46:33.217667376Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793616969","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 16 CVEs. Fixed in 5.2.9.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T11:56:10Z","modified":"2026-11-02T19:46:33.125808392Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793632081","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 5.3.13-tuxcare.5.","status":"published","published":"2026-11-02T16:08:01Z","modified":"2026-11-02T19:46:33.678763009Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793635118","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T16:58:39Z","modified":"2026-11-02T19:46:33.67718623Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793883499","title":"TuxCare security update for org.springframework (18 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 18 CVEs. Fixed in 5.2.8.RELEASE-tuxcare.3.","status":"published","published":"2026-11-05T13:58:20Z","modified":"2026-11-06T13:15:13.169324833Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793884148","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.3-tuxcare.4.","status":"published","published":"2026-11-05T14:09:09Z","modified":"2026-11-06T13:15:21.610344433Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793897029","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.2.","status":"published","published":"2026-11-05T17:43:50Z","modified":"2026-11-06T13:15:20.810488775Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794251616","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 12 CVEs. Fixed in 2.5.4-tuxcare.1.","status":"published","published":"2026-11-09T20:13:37Z","modified":"2026-11-10T01:15:03.458834883Z","updated_at":"2026-11-10T01:43:20.132342Z"},{"id":"USN-7165-1","title":"libspring-java vulnerability","description":"It was discovered that the Spring Framework incorrectly handled web\nrequests via data binding. An attacker could possibly use this issue to\nachieve remote code execution and obtain sensitive information.\n","status":"published","published":"2024-12-17T13:02:47Z","modified":"2026-04-27T17:38:20.591774Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}