{"id":"CVE-2024-22259","aliases":["CLSA-2025-1751328209","CLSA-2025-1756771563","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2025-1761696401","CLSA-2025-1762906008","CLSA-2025-1762906011","CLSA-2025-1765411678","CLSA-2025-1766016492","CLSA-2026-1774311642","CLSA-2026-1775781159","CLSA-2026-1776040412","CLSA-2026-1776213242","CLSA-2026-1777423179","CLSA-2026-1777509589","CLSA-2026-1777941826","CLSA-2026-1782867606","CLSA-2026-1783386124","CLSA-2026-1784769551","CLSA-2026-1787726639","CLSA-2026-1787732821","CLSA-2026-1787777604","CLSA-2026-1788804848","CLSA-2026-1790857021","CLSA-2026-1792599701","CLSA-2026-1793624500","CLSA-2026-1793627408","CLSA-2026-1793630574","CLSA-2026-1793635654","CLSA-2026-1793636127","CLSA-2026-1793636640","CLSA-2026-1793881017","CLSA-2026-1793881978","CLSA-2026-1793886526","CLSA-2026-1793886986","CLSA-2026-1793888176","CLSA-2026-1793889525","CLSA-2026-1793890612","CLSA-2026-1793891729","CLSA-2026-1793892885","CLSA-2026-1793897029","CLSA-2026-1793897973","CLSA-2026-1793898486","CLSA-2026-1793898972","CLSA-2026-1793900222","CLSA-2026-1793900682","CLSA-2026-1793903878","CLSA-2026-1794157893","CLSA-2026-1794184482","DEBIAN-CVE-2024-22259","EUVD-2024-0937","GHSA-2rmj-mq67-h97g","GHSA-2wrp-6fg6-hmc5","GHSA-4gc7-5j7h-4qph","GHSA-4wrc-f8pq-fpqp","GHSA-hgjh-9rj2-g67j","RHLW-2026-a9afa2d7b2973961","UBUNTU-CVE-2024-22259"],"status":"published","title":"CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.02573,"percentile":0.85381,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2024-03-16T04:40:08Z","modified":"2026-11-09T07:15:04Z","fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-web","fixed_in":["6.1.5","6.0.18","5.3.33"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.1.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.18"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.33"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.1"}]}],"versions":["5.2.0.RELEASE"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.1"}]}],"versions":["6.0.16"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.2"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.2"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.2"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.3"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.3"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.1"}]}],"versions":["5.1.5.RELEASE"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.2"}]}],"versions":["5.3.25","5.3.25-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.2"}]}],"versions":["5.3.25","5.3.25-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.2"}]}],"versions":["5.3.25","5.3.25-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.2"}]}],"versions":["5.3.25","5.3.25-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.1"}]}],"versions":["5.1.20.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.9.RELEASE"},{"fixed":"4.1.9.RELEASE-tuxcare.1"}]}],"versions":["4.1.9.RELEASE"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.5"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.5"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.5"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.5"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.5"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.1"}]}],"versions":["5.1.9.RELEASE"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.4"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.4"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1","5.0.13.RELEASE-tuxcare.2","5.0.13.RELEASE-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.1"}]}],"versions":["5.1.18.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.32"},{"fixed":"5.3.32-tuxcare.2"}]}],"versions":["5.3.32","5.3.32-tuxcare.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.6"}]}],"versions":["5.3.21","5.3.21-tuxcare.1","5.3.21-tuxcare.2","5.3.21-tuxcare.3","5.3.21-tuxcare.4","5.3.21-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.6"}]}],"versions":["5.3.21","5.3.21-tuxcare.1","5.3.21-tuxcare.2","5.3.21-tuxcare.3","5.3.21-tuxcare.4","5.3.21-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.6"}]}],"versions":["6.0.15","6.0.15-tuxcare.1","6.0.15-tuxcare.2","6.0.15-tuxcare.3","6.0.15-tuxcare.4","6.0.15-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.6"}]}],"versions":["6.0.15","6.0.15-tuxcare.1","6.0.15-tuxcare.2","6.0.15-tuxcare.3","6.0.15-tuxcare.4","6.0.15-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.4"}]}],"versions":["5.3.23","5.3.23-tuxcare.1","5.3.23-tuxcare.2","5.3.23-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.3"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1","4.3.21.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.3"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1","4.3.21.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.3"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1","4.3.21.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.4"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.2"}]}],"versions":["5.1.13.RELEASE","5.1.13.RELEASE-tuxcare.1"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.4"}]}],"versions":["5.3.20","5.3.20-tuxcare.1","5.3.20-tuxcare.2","5.3.20-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.4"}]}],"versions":["5.3.20","5.3.20-tuxcare.1","5.3.20-tuxcare.2","5.3.20-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.4"}]}],"versions":["5.3.20","5.3.20-tuxcare.1","5.3.20-tuxcare.2","5.3.20-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.4"}]}],"versions":["5.3.20","5.3.20-tuxcare.1","5.3.20-tuxcare.2","5.3.20-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.4"}]}],"versions":["5.3.20","5.3.20-tuxcare.1","5.3.20-tuxcare.2","5.3.20-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.5"}]}],"versions":["5.3.9","5.3.9-tuxcare.1","5.3.9-tuxcare.2","5.3.9-tuxcare.3","5.3.9-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.5"}]}],"versions":["5.3.9","5.3.9-tuxcare.1","5.3.9-tuxcare.2","5.3.9-tuxcare.3","5.3.9-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.5"}]}],"versions":["5.3.9","5.3.9-tuxcare.1","5.3.9-tuxcare.2","5.3.9-tuxcare.3","5.3.9-tuxcare.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.14"},{"fixed":"6.0.14-tuxcare.4"}]}],"versions":["6.0.14","6.0.14-tuxcare.1","6.0.14-tuxcare.2","6.0.14-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.14"},{"fixed":"6.0.14-tuxcare.4"}]}],"versions":["6.0.14","6.0.14-tuxcare.1","6.0.14-tuxcare.2","6.0.14-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.8"}]}],"versions":["6.0.13","6.0.13-tuxcare.1","6.0.13-tuxcare.2","6.0.13-tuxcare.3","6.0.13-tuxcare.4","6.0.13-tuxcare.5","6.0.13-tuxcare.6","6.0.13-tuxcare.7"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.8"}]}],"versions":["6.0.13","6.0.13-tuxcare.1","6.0.13-tuxcare.2","6.0.13-tuxcare.3","6.0.13-tuxcare.4","6.0.13-tuxcare.5","6.0.13-tuxcare.6","6.0.13-tuxcare.7"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.6"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2","5.3.13-tuxcare.3","5.3.13-tuxcare.4","5.3.13-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.6"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2","5.3.13-tuxcare.3","5.3.13-tuxcare.4","5.3.13-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.6"}]}],"versions":["5.3.13","5.3.13-tuxcare.1","5.3.13-tuxcare.2","5.3.13-tuxcare.3","5.3.13-tuxcare.4","5.3.13-tuxcare.5"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.1.5"}]}],"versions":["6.1.0","6.1.1","6.1.2","6.1.3","6.1.4"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.18"}]}],"versions":["6.0.0","6.0.1","6.0.10","6.0.11","6.0.12","6.0.13","6.0.14","6.0.15","6.0.16","6.0.17","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8","6.0.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.33"}]}],"versions":["1.0","1.0-rc1","1.0.1","1.1","1.1-rc1","1.1-rc2","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.2","1.2-rc1","1.2-rc2","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0","2.0-m1","2.0-m2","2.0-m3","2.0-m4","2.0-m5","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.5","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.6.SEC01","2.5.6.SEC02","2.5.6.SEC03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.20","5.3.21","5.3.22","5.3.23","5.3.24","5.3.25","5.3.26","5.3.27","5.3.28","5.3.29","5.3.3","5.3.30","5.3.31","5.3.32","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["1.0","1.0-rc1","1.0.1","1.1","1.1-rc1","1.1-rc2","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.2","1.2-rc1","1.2-rc2","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0","2.0-m1","2.0-m2","2.0-m3","2.0-m4","2.0-m5","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.5","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.6.SEC01","2.5.6.SEC02","2.5.6.SEC03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":44,"products":[{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"spring","product":"spring framework"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://spring.io/security/cve-2024-22259","tags":["x_transferred","Vendor Advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22259","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hgjh-9rj2-g67j","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22259.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-22259","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["web"]},{"url":"https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626","tags":["report"]},{"url":"https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417","tags":["report"]},{"url":"https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000027","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4wrc-f8pq-fpqp","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-22262","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22262","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2wrp-6fg6-hmc5","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38809","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38809","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2rmj-mq67-h97g","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38820","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38820.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38820","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4gc7-5j7h-4qph","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-22259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22259","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-22259","title":"CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T04:40:08.68Z","modified":"2025-02-13T17:33:39.598Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-0937","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T04:40:08Z","modified":"2025-02-13T17:33:39Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:03:47.088299Z"}],"ghsa":[{"id":"GHSA-hgjh-9rj2-g67j","title":"Spring Framework URL Parsing with Host Validation Vulnerability","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243, but with different input.","status":"published","published":"2024-03-16T06:30:27Z","modified":"2025-02-13T19:05:46Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:38:31.416868Z"}],"nvd":[{"id":"CVE-2024-22259","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T05:15:20.83Z","modified":"2026-06-17T07:11:03.053Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:09:41.654534Z"}],"osv":[{"id":"CVE-2024-22259","title":"CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T04:40:08.68Z","modified":"2026-10-28T02:30:58.164633602Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"DEBIAN-CVE-2024-22259","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T05:15:20.83Z","modified":"2026-11-02T12:00:44.33234533Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"GHSA-hgjh-9rj2-g67j","title":"Spring Framework URL Parsing with Host Validation Vulnerability","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243, but with different input.","status":"published","published":"2024-03-16T06:30:27Z","modified":"2026-09-10T03:50:10.753799391Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"RHLW-2026-a9afa2d7b2973961","title":"Lightwell Security Advisory: spring-web 5.3.18.rhlw-00010","description":"Red Hat Lightwell has released org.springframework:spring-web 5.3.18.rhlw-00010 with backported fixes for CVE-2016-1000027, CVE-2024-22259, CVE-2024-22262, CVE-2024-38809, and CVE-2024-38820.\n\nCVE-2016-1000027: Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data.\n\nCVE-2024-22259: CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)\n\nCVE-2024-22262: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259  and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nCVE-2024-38809: Applications that parse ETags from \"If-Match\" or \"If-None-Match\" request headers are vulnerable to DoS attack.\n\nUsers of affected versions should upgrade to the corresponding fixed version.\n\nUsers of older, unsupported versions could enforce a size limit on \"If-Match\" and \"If-None-Match\" headers, e.g. through a Filter.\n\nCVE-2024-38820: CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception\n\nThis patched artifact is a drop-in replacement for org.springframework:spring-web 5.3.18 from Maven Central.","status":"published","published":"2026-10-12T15:37:41Z","modified":"2026-10-27T04:13:02.695456445Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2024-22259","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks. This is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.","status":"published","published":"2024-03-16T05:15:00Z","modified":"2026-10-17T12:56:31.444887338Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"CLSA-2025-1751328209","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-11-02T19:45:08.377361739Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1761696401","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.096302325Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906008","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:06.085973092Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906011","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:08.3726791Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1765411678","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:15.748542278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1766016492","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:13.728165836Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774311642","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 8 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-11-02T19:45:03.86491648Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1775781159","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-11-02T19:45:21.896540888Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776040412","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-11-02T19:45:23.931874136Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776213242","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:23.335793729Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777423179","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.3.25-tuxcare.2.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:25.332098486Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777509589","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.2.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:25.314132971Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777941826","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-02T19:45:25.95820547Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1782867606","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-11-02T19:45:39.141905603Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1783386124","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.5.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-11-02T19:45:39.322399332Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784769551","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-11-02T19:45:44.897974185Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1787726639","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.4-tuxcare.1.","status":"published","published":"2026-08-26T06:43:59Z","modified":"2026-11-02T19:46:00.417010152Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787732821","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.4.","status":"published","published":"2026-08-26T08:27:01Z","modified":"2026-11-02T19:45:58.639641642Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787777604","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.4.","status":"published","published":"2026-08-26T20:53:24Z","modified":"2026-11-02T19:46:00.498459477Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788804848","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.","status":"published","published":"2026-09-07T18:14:08Z","modified":"2026-11-02T19:46:13.771587388Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1790857021","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 25 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T12:17:01Z","modified":"2026-11-02T19:46:25.072257838Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1792599701","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 5.3.32-tuxcare.2.","status":"published","published":"2026-10-21T16:21:41Z","modified":"2026-11-02T19:46:30.280864985Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793624500","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 3 CVEs. Fixed in 5.3.21-tuxcare.6.","status":"published","published":"2026-11-02T14:01:41Z","modified":"2026-11-02T19:46:33.688882629Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793627408","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.15-tuxcare.6.","status":"published","published":"2026-11-02T14:50:09Z","modified":"2026-11-02T19:46:33.685702476Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793630574","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.3.23-tuxcare.4.","status":"published","published":"2026-11-02T15:42:54Z","modified":"2026-11-02T19:46:33.689138425Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793635654","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 5 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T17:07:35Z","modified":"2026-11-02T19:46:33.693527043Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793636127","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.1.3.RELEASE-tuxcare.4.","status":"published","published":"2026-11-02T17:15:28Z","modified":"2026-11-02T19:46:33.696005984Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793636640","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.2.","status":"published","published":"2026-11-02T17:24:01Z","modified":"2026-11-02T19:46:33.677604041Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793881017","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.3.19-tuxcare.4.","status":"published","published":"2026-11-05T13:16:58Z","modified":"2026-11-06T13:15:03.926485709Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793881978","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 5.3.20-tuxcare.4.","status":"published","published":"2026-11-05T13:32:59Z","modified":"2026-11-06T13:15:04.87153289Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793886526","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.18-tuxcare.4.","status":"published","published":"2026-11-05T14:48:47Z","modified":"2026-11-06T13:15:20.830616098Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793886986","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.9-tuxcare.5.","status":"published","published":"2026-11-05T14:56:27Z","modified":"2026-11-06T13:15:20.797992409Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793888176","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.14-tuxcare.4.","status":"published","published":"2026-11-05T15:16:17Z","modified":"2026-11-06T13:15:09.263957274Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793889525","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.13-tuxcare.8.","status":"published","published":"2026-11-05T15:38:46Z","modified":"2026-11-06T13:15:09.153539152Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793890612","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.3.13-tuxcare.6.","status":"published","published":"2026-11-05T15:56:54Z","modified":"2026-11-06T13:15:13.769983775Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793891729","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.12-tuxcare.8.","status":"published","published":"2026-11-05T16:15:30Z","modified":"2026-11-06T13:15:22.305221432Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793892885","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.11-tuxcare.8.","status":"published","published":"2026-11-05T16:34:46Z","modified":"2026-11-06T13:15:13.671399963Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793897029","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.2.","status":"published","published":"2026-11-05T17:43:50Z","modified":"2026-11-06T13:15:20.810488775Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793897973","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.2.","status":"published","published":"2026-11-05T17:59:34Z","modified":"2026-11-06T13:15:13.978425143Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793898486","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T18:08:06Z","modified":"2026-11-06T13:15:08.676109929Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793898972","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.2.","status":"published","published":"2026-11-05T18:16:13Z","modified":"2026-11-06T19:13:07.976247992Z","updated_at":"2026-11-06T19:35:49.673501Z"},{"id":"CLSA-2026-1793900222","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.3.","status":"published","published":"2026-11-05T18:37:03Z","modified":"2026-11-06T13:15:22.3106304Z","updated_at":"2026-11-06T13:44:09.891978Z"}]},"sources_more":{"osv":4}}