{"id":"CVE-2023-20861","aliases":["CLSA-2025-1756771563","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2026-1776040412","CLSA-2026-1776126823","CLSA-2026-1781657700","CLSA-2026-1785030424","CLSA-2026-1785815205","CLSA-2026-1786569587","CLSA-2026-1787070801","CLSA-2026-1788341776","CLSA-2026-1788360559","CLSA-2026-1788361406","CLSA-2026-1788372470","CLSA-2026-1788782570","CLSA-2026-1788804848","CLSA-2026-1788813738","CLSA-2026-1788865685","CLSA-2026-1789380988","CLSA-2026-1789416166","CLSA-2026-1790069660","CLSA-2026-1790069975","CLSA-2026-1790070464","CLSA-2026-1790071189","CLSA-2026-1790074038","CLSA-2026-1790074384","CLSA-2026-1790857021","CLSA-2026-1790970183","CLSA-2026-1790970528","CLSA-2026-1791107509","CLSA-2026-1791213084","CLSA-2026-1791218458","CLSA-2026-1791218487","CLSA-2026-1791289094","CLSA-2026-1791463819","CLSA-2026-1791464078","CLSA-2026-1791464212","CLSA-2026-1792590655","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1793057670","CLSA-2026-1793616969","CLSA-2026-1793620971","CLSA-2026-1793883499","CLSA-2026-1793884738","CLSA-2026-1793890045","CLSA-2026-1793897973","CLSA-2026-1793900222","CLSA-2026-1794178070","CLSA-2026-1794181101","CLSA-2026-1794238635","DEBIAN-CVE-2023-20861","EUVD-2023-0877","GHSA-564r-hj7v-mcr5","GHSA-7phw-cxx7-q9vq","GHSA-9cmq-m9j5-mvww","GHSA-ccgv-vj62-xf9h","GHSA-cx7f-g6mp-7hqm","GHSA-jmp9-x22r-554x","GHSA-wxqc-pxw9-g2p8","RHLW-2026-25544e781d50b856","RHSA-2023:3610","RHSA-2023:3622","RHSA-2023:3771","RHSA-2024:0778","ROOT-APP-MAVEN-CVE-2023-20861","UBUNTU-CVE-2023-20861"],"status":"published","title":"Spring Framework vulnerable to denial of service via specially crafted SpEL expression","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0097,"percentile":0.62364,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-917"],"published":"2023-03-23T00:00:00Z","modified":"2026-11-09T19:28:37Z","fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-expression","fixed_in":["6.0.7","5.3.26","5.2.23.RELEASE"],"sources":["ghsa","osv"]},{"ecosystem":"Root:Maven","package":"org.springframework:spring-expression","fixed_in":["5.3.20-aikido.4","5.3.20-aikido.5","5.3.20-aikido.6","5.3.20-aikido.7","5.3.20-aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-expression","fixed_in":["5.3.20-root.io.4","5.3.20-root.io.5","5.3.20-root.io.6","5.3.20-root.io.7","5.3.20-root.io.8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.7"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.26"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.23.RELEASE"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.9"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3","5.2.13.RELEASE-tuxcare.4","5.2.13.RELEASE-tuxcare.5","5.2.13.RELEASE-tuxcare.6","5.2.13.RELEASE-tuxcare.7","5.2.13.RELEASE-tuxcare.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.9"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3","5.2.13.RELEASE-tuxcare.4","5.2.13.RELEASE-tuxcare.5","5.2.13.RELEASE-tuxcare.6","5.2.13.RELEASE-tuxcare.7","5.2.13.RELEASE-tuxcare.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.1"}]}],"versions":["6.0.0"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.1"}]}],"versions":["6.0.0"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.1"}]}],"versions":["6.0.0"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.1"}]}],"versions":["6.0.0"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.1"}]}],"versions":["6.0.0"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.11"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.10","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7","4.2.9.RELEASE-tuxcare.8","4.2.9.RELEASE-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.11"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.10","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7","4.2.9.RELEASE-tuxcare.8","4.2.9.RELEASE-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.11"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.10","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7","4.2.9.RELEASE-tuxcare.8","4.2.9.RELEASE-tuxcare.9"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.5"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3","5.0.13.RELEASE-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.1"}]}],"versions":["5.2.11.RELEASE"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.5"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2","4.3.4.RELEASE-tuxcare.3","4.3.4.RELEASE-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.4"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.7"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.26"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.20","5.3.21","5.3.22","5.3.23","5.3.24","5.3.25","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.23.RELEASE"}]}],"versions":["3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.401.1.1686649641-3.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1686649756-1.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.1686680473-1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.401.1.1686680404-3.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-dependencies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-1.el8ev"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1706515741-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.426.3.1706515686-3.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Root:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-aikido.4"},{"fixed":"5.3.20-aikido.5"},{"fixed":"5.3.20-aikido.6"},{"fixed":"5.3.20-aikido.7"},{"fixed":"5.3.20-aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-root.io.4"},{"fixed":"5.3.20-root.io.5"},{"fixed":"5.3.20-root.io.6"},{"fixed":"5.3.20-root.io.7"},{"fixed":"5.3.20-root.io.8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":207,"products":[{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://spring.io/security/cve-2023-20861","tags":["x_transferred","Vendor Advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20230420-0007/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20861","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20230420-0007","tags":["web"]},{"url":"https://github.com/advisories/GHSA-564r-hj7v-mcr5","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20861.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-20861","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://spring.io/security/cve-2023-20860","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20860.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20860","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7phw-cxx7-q9vq","tags":["advisory"]},{"url":"https://spring.io/security/cve-2025-41249","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41249","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jmp9-x22r-554x","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38816","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38816","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cx7f-g6mp-7hqm","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-22243","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22243","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ccgv-vj62-xf9h","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38808","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38808.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38808","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9cmq-m9j5-mvww","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20863","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20863.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20863","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wxqc-pxw9-g2p8","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3610","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207835","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3610.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30953","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1370","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-493p-pfq6-5258","tags":["advisory"]},{"url":"https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20860","tags":["advisory"]},{"url":"https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20861","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20861","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24422","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32977","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3042","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32981","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3622","tags":["advisory"]},{"url":"https://docs.openshift.com/container-platform/4.13/cicd/jenkins/important-changes-to-openshift-jenkins-images.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182788","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3622.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1436","tags":["advisory"]},{"url":"https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27903","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27904","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3771","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210036","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3771.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0778","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260182","tags":["report"]},{"url":"https://issues.redhat.com/browse/JKNS-271","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-289","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-10976","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11158","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11348","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1357","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13652","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13901","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14113","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14393","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14642","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15648","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1709","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1942","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2099","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2184","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2318","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27391","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-3692","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4819","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4833","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-655","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6632","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6982","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7016","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7050","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-710","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8420","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8497","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPTOOLS-246","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0778.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7692","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26291","tags":["advisory"]},{"url":"https://maven.apache.org/docs/3.8.1/release-notes.html#cve-2021-26291","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1962","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://go.dev/issue/53616","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","tags":["advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","tags":["article"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","tags":["article"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20862","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20862","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25761","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25761","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25762","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26048","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26049","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37947","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37947","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2999","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40337","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40338","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40339","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40341","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23897","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/6","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23898","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2023-20861","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T00:00:00Z","modified":"2025-02-25T15:38:17.844Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-0877","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T00:00:00Z","modified":"2025-02-25T15:38:17Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"none"}],"updated_at":"2026-11-02T20:53:24.103419Z"}],"ghsa":[{"id":"GHSA-564r-hj7v-mcr5","title":"Spring Framework vulnerable to denial of service via specially crafted SpEL expression","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T21:30:19Z","modified":"2025-02-25T18:40:06Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-917"],"updated_at":"2026-11-02T14:38:33.163519Z"}],"nvd":[{"id":"CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T21:15:19.737Z","modified":"2026-06-17T05:31:02.403Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:50.908252Z"}],"osv":[{"id":"DEBIAN-CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T21:15:19.737Z","modified":"2026-10-26T18:00:30.024688422Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"GHSA-564r-hj7v-mcr5","title":"Spring Framework vulnerable to denial of service via specially crafted SpEL expression","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T21:30:19Z","modified":"2025-02-25T18:47:52.656761Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-917"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"RHLW-2026-25544e781d50b856","title":"Lightwell Security Advisory: spring-expression 5.3.18.rhlw-00010","description":"Red Hat Lightwell has released org.springframework:spring-expression 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2025-41249, CVE-2024-38816, CVE-2024-22243, CVE-2024-38808, CVE-2023-20863, and CVE-2023-20861.\n\nCVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using \"**\" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.\n\nCVE-2025-41249: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.\n\nYour application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.\n\nYou are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.\n\nThis CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 .\n\nCVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n\nSpecifically, an application is vulnerable when both of the following are true:\n\n  *  the web application uses RouterFunctions to serve static resources\n  *  resource handling is explicitly configured with a FileSystemResource location\n\n\nHowever, malicious requests are blocked and rejected when any of the following is true:\n\n  *  the  Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html  is in use\n  *  the application runs on Tomcat or Jetty\n\nCVE-2024-22243: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nCVE-2024-38808: CVE-2024-38808: Spring Expression DoS Vulnerability\n\nCVE-2023-20863: In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.\n\nCVE-2023-20861: In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.\n\nThis patched artifact is a drop-in replacement for org.springframework:spring-expression 5.3.18 from Maven Central.","status":"published","published":"2026-07-14T12:50:26Z","modified":"2026-10-27T04:13:00.933467173Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2023:3610","title":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","status":"published","published":"2024-09-30T07:07:53Z","modified":"2026-10-02T10:03:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3622","title":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","status":"published","published":"2024-09-30T07:08:01Z","modified":"2026-10-02T10:03:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3771","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-13T21:12:59Z","modified":"2026-10-02T10:03:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2024:0778","title":"Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update","status":"published","published":"2024-09-30T15:05:06Z","modified":"2026-10-13T10:06:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"ROOT-APP-MAVEN-CVE-2023-20861","title":"CVE-2023-20861 in org.springframework:spring-expression - Patched by Root","description":"Root has patched CVE-2023-20861 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-27T15:54:58Z","modified":"2026-10-27T16:15:02.544047555Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.","status":"published","published":"2023-03-23T21:15:00Z","modified":"2026-10-17T12:56:04.277137983Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776040412","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-11-02T19:45:23.931874136Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776126823","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:20.531539116Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1781657700","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.25-tuxcare.3.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:35.373107914Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785030424","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:49Z","modified":"2026-11-02T19:45:44.848387376Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785815205","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-11-02T19:45:49.917621697Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786569587","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.9.","status":"published","published":"2026-08-12T21:19:47Z","modified":"2026-11-02T19:45:53.415980082Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787070801","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4.","status":"published","published":"2026-08-18T16:33:21Z","modified":"2026-11-02T19:45:54.243377662Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1788341776","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T09:36:16Z","modified":"2026-11-02T19:46:05.053439634Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788360559","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.","status":"published","published":"2026-09-02T14:49:19Z","modified":"2026-11-02T19:46:04.773724636Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788361406","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1.","status":"published","published":"2026-09-02T15:03:26Z","modified":"2026-11-02T19:46:05.755920698Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788372470","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T18:07:50Z","modified":"2026-11-02T19:46:04.664553118Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788782570","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.11.","status":"published","published":"2026-09-07T12:02:50Z","modified":"2026-11-02T19:46:07.359939354Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788804848","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.","status":"published","published":"2026-09-07T18:14:08Z","modified":"2026-11-02T19:46:13.771587388Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1788813738","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5.","status":"published","published":"2026-09-07T20:42:18Z","modified":"2026-11-02T19:46:13.736657774Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1788865685","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5.","status":"published","published":"2026-09-08T11:08:05Z","modified":"2026-11-02T19:46:10.565355471Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1789380988","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.","status":"published","published":"2026-09-14T10:16:28Z","modified":"2026-11-02T19:46:15.379985029Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1789416166","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.5.","status":"published","published":"2026-09-14T20:02:46Z","modified":"2026-11-02T19:46:15.988069179Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1790069660","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.","status":"published","published":"2026-09-22T09:34:20Z","modified":"2026-11-02T19:46:21.394928172Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069975","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.","status":"published","published":"2026-09-22T09:39:35Z","modified":"2026-11-02T19:46:22.513600671Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790070464","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.","status":"published","published":"2026-09-22T09:47:44Z","modified":"2026-11-02T19:46:20.26894182Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790071189","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.","status":"published","published":"2026-09-22T09:59:49Z","modified":"2026-11-02T19:46:20.152967042Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790074038","title":"TuxCare security update for org.springframework (30 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4.","status":"published","published":"2026-09-22T10:47:18Z","modified":"2026-11-02T19:46:20.907661115Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790074384","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.","status":"published","published":"2026-09-22T10:53:04Z","modified":"2026-11-02T19:46:21.573735323Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790857021","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 25 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T12:17:01Z","modified":"2026-11-02T19:46:25.072257838Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790970183","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.1.","status":"published","published":"2026-10-02T19:43:03Z","modified":"2026-11-02T19:46:26.158192626Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1790970528","title":"TuxCare security update for org.springframework (27 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-02T19:48:48Z","modified":"2026-11-02T19:46:26.165563892Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791107509","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-10-04T09:51:49Z","modified":"2026-11-02T19:46:26.18760799Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791213084","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T15:11:24Z","modified":"2026-11-02T19:46:26.002316843Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218458","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:40:58Z","modified":"2026-11-02T19:46:26.143363772Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218487","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:41:27Z","modified":"2026-11-02T19:46:26.185897679Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791289094","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.","status":"published","published":"2026-10-06T12:18:14Z","modified":"2026-11-02T19:46:26.292239404Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791463819","title":"TuxCare security update for org.springframework (36 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.1.","status":"published","published":"2026-10-08T12:50:19Z","modified":"2026-11-09T19:28:37.080317508Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1791464078","title":"TuxCare security update for org.springframework (15 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 15 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.7.","status":"published","published":"2026-10-08T12:54:38Z","modified":"2026-11-02T19:46:26.891439652Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791464212","title":"TuxCare security update for org.springframework (30 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 30 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-10-08T12:56:52Z","modified":"2026-11-02T19:46:26.886889936Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1792590655","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:50:55Z","modified":"2026-11-02T19:46:30.234656173Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590787","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:53:07Z","modified":"2026-11-02T19:46:29.631616099Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792591113","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.","status":"published","published":"2026-10-21T13:58:33Z","modified":"2026-11-02T19:46:29.678370863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793057670","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 20 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.1.","status":"published","published":"2026-10-26T23:34:30Z","modified":"2026-11-02T19:46:31.727005747Z","updated_at":"2026-11-02T20:28:59.01272Z"}]},"sources_more":{"osv":11}}