{"id":"CVE-2022-22971","aliases":["ALPINE-CVE-2022-22971","CLSA-2025-1756771563","CLSA-2025-1762906008","CLSA-2026-1774311639","CLSA-2026-1774916751","CLSA-2026-1775003159","CLSA-2026-1776213242","CLSA-2026-1777250295","CLSA-2026-1777509606","CLSA-2026-1777941826","CLSA-2026-1782867606","CLSA-2026-1784769547","CLSA-2026-1784769548","CLSA-2026-1784769551","CLSA-2026-1785204448","CLSA-2026-1785935276","CLSA-2026-1790069660","CLSA-2026-1790069975","CLSA-2026-1790074384","CLSA-2026-1790089638","CLSA-2026-1790234279","CLSA-2026-1790878884","CLSA-2026-1790970183","CLSA-2026-1790970528","CLSA-2026-1791107509","CLSA-2026-1791218458","CLSA-2026-1791218487","CLSA-2026-1791281041","CLSA-2026-1791289094","CLSA-2026-1791392800","CLSA-2026-1791463819","CLSA-2026-1792575333","CLSA-2026-1792590655","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1792601588","CLSA-2026-1793636640","CLSA-2026-1793637145","CLSA-2026-1794238635","DEBIAN-CVE-2022-22971","EUVD-2022-5219","GHSA-rqph-vqwm-22vc","RHLW-2026-8279a9b7f6bb0be6","UBUNTU-CVE-2022-22971"],"status":"published","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03174,"percentile":0.88147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-770"],"published":"2022-05-12T19:30:49Z","modified":"2026-11-09T19:28:37Z","exploits":[{"source":"pocgithub","id":"tchize/CVE-2022-22971","title":"tchize/CVE-2022-22971","date":"2022-11-26","url":"https://github.com/tchize/CVE-2022-22971"}],"fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-messaging","fixed_in":["5.3.20","5.2.22.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.17","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"jenkins","fixed_in":["2.361.2-r0"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-messaging","fixed_in":["5.3.18.rhlw-00010"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.20"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.2.21.RELEASE"},{"fixed":"5.2.22.RELEASE"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.361.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.1"}]}],"versions":["5.2.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.1"}]}],"versions":["5.3.7"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.2"}]}],"versions":["4.0.0.RELEASE","4.0.0.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.2"}]}],"versions":["4.0.0.RELEASE","4.0.0.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.2"}]}],"versions":["4.0.0.RELEASE","4.0.0.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.1"}]}],"versions":["4.2.9.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.1"}]}],"versions":["5.1.6.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.1"}]}],"versions":["5.0.5.RELEASE"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.1"}]}],"versions":["5.0.5.RELEASE"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.1"}]}],"versions":["5.0.13.RELEASE"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.2"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.2"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.2"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.2"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.1"}]}],"versions":["5.2.17.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.1"}]}],"versions":["5.1.3.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.1"}]}],"versions":["5.0.19.RELEASE"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0.RELEASE"},{"fixed":"5.0.0.RELEASE-tuxcare.1"}]}],"versions":["5.0.0.RELEASE"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.27.RELEASE"},{"fixed":"4.3.27.RELEASE-tuxcare.1"}]}],"versions":["4.3.27.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.1"}]}],"versions":["4.3.21.RELEASE"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.5"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3","4.3.9.RELEASE-tuxcare.4"],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.20"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.22.RELEASE"}]}],"versions":["4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":97,"products":[{"vendor":"netapp","product":"cloud_secure_agent"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"oracle","product":"financial_services_crime_and_compliance_management_studio"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://tanzu.vmware.com/security/cve-2022-22971","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory","web","report"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220616-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22971","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/dc2947c52df18d5e99cad03383f7d6ba13d031fd","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/159a99bbafdd6c01871228113d7042c3f83f360f","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20220616-0003","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rqph-vqwm-22vc","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-22971","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/22xxx/CVE-2022-22971.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-22971","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2022-22971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22971","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T19:30:49Z","modified":"2026-10-08T21:13:55.971Z","cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-5219","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T19:30:49Z","modified":"2026-10-08T21:13:55Z","updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-rqph-vqwm-22vc","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-13T00:00:29Z","modified":"2024-03-14T20:54:21Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:37:40.81935Z"}],"nvd":[{"id":"CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T20:15:15.11Z","modified":"2026-10-08T22:17:16.423Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:20.264424Z"}],"osv":[{"id":"ALPINE-CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T20:15:15.11Z","modified":"2026-11-03T07:31:19.698035561Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"DEBIAN-CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T20:15:15.11Z","modified":"2026-11-03T08:02:11.031442996Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"GHSA-rqph-vqwm-22vc","title":"Allocation of Resources Without Limits or Throttling in Spring Framework","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-13T00:00:29Z","modified":"2024-03-14T21:05:11.004569Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:56.281047Z"},{"id":"UBUNTU-CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T20:15:00Z","modified":"2026-10-17T12:56:02.255805254Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906008","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:06.085973092Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774311639","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-11-02T19:45:18.308143007Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774916751","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-11-02T19:45:17.426870197Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1775003159","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-11-02T19:45:20.464929039Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776213242","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:23.335793729Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777250295","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-11-02T19:45:28.348885071Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777509606","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:28.07523245Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777941826","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-02T19:45:25.95820547Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1782867606","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-11-02T19:45:39.141905603Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784769547","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:46.421144185Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1784769548","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:47.256817575Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1784769551","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:44.897974185Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785204448","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 5 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-11-02T19:45:47.168301409Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785935276","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.2.","status":"published","published":"2026-08-05T13:07:56Z","modified":"2026-11-02T19:45:50.929701528Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1790069660","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.","status":"published","published":"2026-09-22T09:34:20Z","modified":"2026-11-02T19:46:21.394928172Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069975","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.","status":"published","published":"2026-09-22T09:39:35Z","modified":"2026-11-02T19:46:22.513600671Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790074384","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.","status":"published","published":"2026-09-22T10:53:04Z","modified":"2026-11-02T19:46:21.573735323Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790089638","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1.","status":"published","published":"2026-09-22T15:07:18Z","modified":"2026-11-02T19:46:21.559428645Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790234279","title":"TuxCare security update for org.springframework (27 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 27 CVEs. Fixed in 5.2.17.RELEASE-tuxcare.1.","status":"published","published":"2026-09-24T07:17:59Z","modified":"2026-11-02T19:46:21.76882388Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790878884","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T18:21:24Z","modified":"2026-11-02T19:46:24.362652026Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790970183","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.1.","status":"published","published":"2026-10-02T19:43:03Z","modified":"2026-11-02T19:46:26.158192626Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790970528","title":"TuxCare security update for org.springframework (27 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-02T19:48:48Z","modified":"2026-11-02T19:46:26.165563892Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791107509","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-10-04T09:51:49Z","modified":"2026-11-02T19:46:26.18760799Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218458","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:40:58Z","modified":"2026-11-02T19:46:26.143363772Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218487","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:41:27Z","modified":"2026-11-02T19:46:26.185897679Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791281041","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.5.","status":"published","published":"2026-10-06T10:04:01Z","modified":"2026-11-02T19:46:26.232764079Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791289094","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.","status":"published","published":"2026-10-06T12:18:14Z","modified":"2026-11-02T19:46:26.292239404Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791392800","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.6.","status":"published","published":"2026-10-07T17:06:40Z","modified":"2026-11-02T19:46:26.175236478Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791463819","title":"TuxCare security update for org.springframework (36 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.1.","status":"published","published":"2026-10-08T12:50:19Z","modified":"2026-11-09T19:28:37.080317508Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1792575333","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T09:35:33Z","modified":"2026-11-02T19:46:29.583097776Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590655","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:50:55Z","modified":"2026-11-02T19:46:30.234656173Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590787","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:53:07Z","modified":"2026-11-02T19:46:29.631616099Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792591113","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.","status":"published","published":"2026-10-21T13:58:33Z","modified":"2026-11-02T19:46:29.678370863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792601588","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.2.","status":"published","published":"2026-10-21T16:53:08Z","modified":"2026-11-02T19:46:30.51398416Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793636640","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T17:24:01Z","modified":"2026-11-02T19:46:33.677604041Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793637145","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T17:32:26Z","modified":"2026-11-02T19:46:33.691385806Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1794238635","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-11-09T16:37:16Z","modified":"2026-11-09T19:15:14.55405795Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CVE-2022-22971","description":"In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.","status":"published","published":"2022-05-12T19:30:49Z","modified":"2026-10-28T02:30:45.782331632Z","cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"RHLW-2026-8279a9b7f6bb0be6","title":"Lightwell Security Advisory: spring-messaging 5.3.18.rhlw-00010","description":"Red Hat Lightwell has released org.springframework:spring-messaging 5.3.18.rhlw-00010 with a backported security fix.\n\nCVE-2022-22971: In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.\n\nThis patched artifact is a drop-in replacement for org.springframework:spring-messaging 5.3.18 from Maven Central.","status":"published","published":"2026-10-12T16:59:50Z","modified":"2026-10-27T04:00:12.251333882Z","updated_at":"2026-11-02T15:52:58.636919Z"}]}}