{"id":"CVE-2024-38808","aliases":["CLSA-2025-1751328209","CLSA-2025-1756771563","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2025-1761696401","CLSA-2025-1762906011","CLSA-2025-1765930087","CLSA-2026-1775694715","CLSA-2026-1776040412","CLSA-2026-1776126823","CLSA-2026-1777250295","CLSA-2026-1777336766","CLSA-2026-1777855419","CLSA-2026-1781657700","CLSA-2026-1785030424","CLSA-2026-1785957138","CLSA-2026-1786573855","CLSA-2026-1786607229","CLSA-2026-1787070801","CLSA-2026-1788360559","CLSA-2026-1788372470","CLSA-2026-1788376116","CLSA-2026-1788804848","CLSA-2026-1788865685","CLSA-2026-1790069660","CLSA-2026-1790069975","CLSA-2026-1790070464","CLSA-2026-1790071189","CLSA-2026-1790074384","CLSA-2026-1790878884","CLSA-2026-1791213084","CLSA-2026-1791218458","CLSA-2026-1791218487","CLSA-2026-1791289094","CLSA-2026-1791464212","CLSA-2026-1792575333","CLSA-2026-1792590655","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1793615948","CLSA-2026-1793616969","CLSA-2026-1793620066","CLSA-2026-1793620971","CLSA-2026-1793626778","CLSA-2026-1793627408","CLSA-2026-1793629131","CLSA-2026-1793630516","CLSA-2026-1793630548","CLSA-2026-1793630814","CLSA-2026-1793632676","CLSA-2026-1793633435","CLSA-2026-1793634449","CLSA-2026-1793635118","CLSA-2026-1793636127","CLSA-2026-1793636640","CLSA-2026-1793637145","CLSA-2026-1793637878","CLSA-2026-1793882509","CLSA-2026-1793883499","CLSA-2026-1793885497","CLSA-2026-1793897475","CLSA-2026-1794238635","DEBIAN-CVE-2024-38808","EUVD-2024-2544","GHSA-9cmq-m9j5-mvww","RHLW-2026-25544e781d50b856","RHSA-2024:8884","RHSA-2024:8885","RHSA-2024:8886","RHSA-2024:8887","ROOT-APP-MAVEN-CVE-2024-38808","UBUNTU-CVE-2024-38808"],"status":"published","title":"CVE-2024-38808: Spring Expression DoS Vulnerability","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00568,"percentile":0.47408,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2024-08-20T07:12:44Z","modified":"2026-11-11T01:43:17Z","fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-expression","fixed_in":["5.3.39"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","fixed_in":["5.3.37-tuxcare.3"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.springframework:spring-expression","fixed_in":["5.3.20-aikido.4","5.3.20-aikido.5","5.3.20-aikido.6","5.3.20-aikido.7","5.3.20-aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-expression","fixed_in":["5.3.20-root.io.4","5.3.20-root.io.5","5.3.20-root.io.6","5.3.20-root.io.7","5.3.20-root.io.8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.39"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.3"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.3"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.3"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.3"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.3"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.3"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.2"}]}],"versions":["5.3.7","5.3.7-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.1"}]}],"versions":["5.3.24"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.3"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.4"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.4"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.4"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.2"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.3"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.2"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.8"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.8"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.8"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.10"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7","3.0.5.RELEASE-tuxcare.8","3.0.5.RELEASE-tuxcare.9"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.10"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7","3.0.5.RELEASE-tuxcare.8","3.0.5.RELEASE-tuxcare.9"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.10"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7","3.0.5.RELEASE-tuxcare.8","3.0.5.RELEASE-tuxcare.9"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.4"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.4"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.4"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1","5.1.6.RELEASE-tuxcare.2","5.1.6.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.4"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1","5.1.6.RELEASE-tuxcare.2","5.1.6.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.4"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1","5.1.6.RELEASE-tuxcare.2","5.1.6.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.4"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1","5.1.6.RELEASE-tuxcare.2","5.1.6.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.6"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2","5.0.5.RELEASE-tuxcare.3","5.0.5.RELEASE-tuxcare.4","5.0.5.RELEASE-tuxcare.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.5"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.1"}]}],"versions":["5.3.19"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.1"}]}],"versions":["5.3.18"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.13"},{"fixed":"5.3.13-tuxcare.1"}]}],"versions":["5.3.13"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.8.RELEASE"},{"fixed":"5.1.8.RELEASE-tuxcare.1"}]}],"versions":["5.1.8.RELEASE"],"bundled":34},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.39"}]}],"versions":["3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.20","5.3.21","5.3.22","5.3.23","5.3.24","5.3.25","5.3.26","5.3.27","5.3.28","5.3.29","5.3.3","5.3.30","5.3.31","5.3.32","5.3.33","5.3.34","5.3.35","5.3.36","5.3.37","5.3.38","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.462.3.1729837947-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.1729838165-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.462.3.1729839727-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1729839844-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.462.3.1730119132-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1730119231-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.462.3.1729839924-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.1729840148-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-aikido.4"},{"fixed":"5.3.20-aikido.5"},{"fixed":"5.3.20-aikido.6"},{"fixed":"5.3.20-aikido.7"},{"fixed":"5.3.20-aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-root.io.4"},{"fixed":"5.3.20-root.io.5"},{"fixed":"5.3.20-root.io.6"},{"fixed":"5.3.20-root.io.7"},{"fixed":"5.3.20-root.io.8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":206,"products":[{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"spring","product":"spring framework"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://spring.io/security/cve-2024-38808","tags":["Vendor Advisory","web","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240920-0002/","tags":["Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38808","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240920-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9cmq-m9j5-mvww","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38808.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-38808","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://spring.io/security/cve-2023-20860","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20860.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20860","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7phw-cxx7-q9vq","tags":["advisory"]},{"url":"https://spring.io/security/cve-2025-41249","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41249","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jmp9-x22r-554x","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38816","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38816","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cx7f-g6mp-7hqm","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-22243","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22243","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ccgv-vj62-xf9h","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20863","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20863.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20863","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wxqc-pxw9-g2p8","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20861","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20861.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20861","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-564r-hj7v-mcr5","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8884","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8884.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-38808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-38808","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47803","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47804","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8885","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8885.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8886","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8886.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278820","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/02/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8887","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8887.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-38808","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-38808","title":"CVE-2024-38808: Spring Expression DoS Vulnerability","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T07:12:44.736Z","modified":"2024-10-30T18:41:27.943Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-2544","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T07:12:44Z","modified":"2024-10-30T18:41:27Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:05:13.91882Z"}],"ghsa":[{"id":"GHSA-9cmq-m9j5-mvww","title":"Spring Framework vulnerable to Denial of Service","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Older, unsupported versions are also affected.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T09:30:28Z","modified":"2025-06-18T17:46:29Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:38:47.835488Z"}],"nvd":[{"id":"CVE-2024-38808","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T08:15:05.023Z","modified":"2026-06-17T07:41:05.14Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:19.870727Z"}],"osv":[{"id":"CVE-2024-38808","title":"CVE-2024-38808: Spring Expression DoS Vulnerability","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T07:12:44.736Z","modified":"2026-10-28T02:30:54.163868952Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:41.618074Z"},{"id":"DEBIAN-CVE-2024-38808","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.  Specifically, an application is vulnerable when the following is true:    *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T08:15:05.023Z","modified":"2026-11-02T12:00:14.264742627Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"GHSA-9cmq-m9j5-mvww","title":"Spring Framework vulnerable to Denial of Service","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Older, unsupported versions are also affected.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T09:30:28Z","modified":"2026-09-10T03:50:17.479530568Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:43.524801Z"},{"id":"RHLW-2026-25544e781d50b856","title":"Lightwell Security Advisory: spring-expression 5.3.18.rhlw-00010","description":"Red Hat Lightwell has released org.springframework:spring-expression 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2025-41249, CVE-2024-38816, CVE-2024-22243, CVE-2024-38808, CVE-2023-20863, and CVE-2023-20861.\n\nCVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using \"**\" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.\n\nCVE-2025-41249: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.\n\nYour application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.\n\nYou are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.\n\nThis CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 .\n\nCVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n\nSpecifically, an application is vulnerable when both of the following are true:\n\n  *  the web application uses RouterFunctions to serve static resources\n  *  resource handling is explicitly configured with a FileSystemResource location\n\n\nHowever, malicious requests are blocked and rejected when any of the following is true:\n\n  *  the  Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html  is in use\n  *  the application runs on Tomcat or Jetty\n\nCVE-2024-22243: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nCVE-2024-38808: CVE-2024-38808: Spring Expression DoS Vulnerability\n\nCVE-2023-20863: In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.\n\nCVE-2023-20861: In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.\n\nThis patched artifact is a drop-in replacement for org.springframework:spring-expression 5.3.18 from Maven Central.","status":"published","published":"2026-07-14T12:50:26Z","modified":"2026-10-27T04:13:00.933467173Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2024:8884","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update","status":"published","published":"2024-11-15T21:24:04Z","modified":"2026-10-20T10:02:56Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8885","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update","status":"published","published":"2024-11-15T21:24:14Z","modified":"2026-10-20T10:02:56Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8886","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","status":"published","published":"2024-11-15T21:24:34Z","modified":"2026-10-20T10:02:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8887","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update","status":"published","published":"2024-11-15T21:24:24Z","modified":"2026-10-20T10:02:57Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"ROOT-APP-MAVEN-CVE-2024-38808","title":"CVE-2024-38808 in org.springframework:spring-expression - Patched by Root","description":"Root has patched CVE-2024-38808 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-27T15:54:58Z","modified":"2026-10-27T16:15:03.456078431Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2024-38808","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is true:   *  The application evaluates user-supplied SpEL expressions.","status":"published","published":"2024-08-20T08:15:00Z","modified":"2026-10-17T12:56:38.307883438Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:54.69008Z"},{"id":"CLSA-2025-1751328209","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-11-02T19:45:08.377361739Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1761696401","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.096302325Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906011","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:08.3726791Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1765930087","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:10.665620607Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1775694715","title":"TuxCare security update for org.springframework:spring-expression (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 5.3.37-tuxcare.3.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-11-02T19:45:21.361410936Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776040412","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-11-02T19:45:23.931874136Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1776126823","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-11-02T19:45:20.531539116Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777250295","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-11-02T19:45:28.348885071Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777336766","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.4.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:28.410408612Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777855419","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:30Z","modified":"2026-11-11T01:43:17.808262381Z","updated_at":"2026-11-11T01:47:54.277886Z"},{"id":"CLSA-2026-1781657700","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.25-tuxcare.3.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:35.373107914Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785030424","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 14 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:49Z","modified":"2026-11-02T19:45:44.848387376Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785957138","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.","status":"published","published":"2026-08-05T19:12:18Z","modified":"2026-11-02T19:45:51.344685565Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786573855","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.8.","status":"published","published":"2026-08-12T22:30:55Z","modified":"2026-11-02T19:45:55.463817744Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786607229","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 5 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.10.","status":"published","published":"2026-08-13T07:47:09Z","modified":"2026-11-02T19:45:53.440180345Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787070801","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4.","status":"published","published":"2026-08-18T16:33:21Z","modified":"2026-11-02T19:45:54.243377662Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1788360559","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.","status":"published","published":"2026-09-02T14:49:19Z","modified":"2026-11-02T19:46:04.773724636Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788372470","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T18:07:50Z","modified":"2026-11-02T19:46:04.664553118Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788376116","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T19:08:36Z","modified":"2026-11-02T19:46:05.679126478Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788804848","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6.","status":"published","published":"2026-09-07T18:14:08Z","modified":"2026-11-02T19:46:13.771587388Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1788865685","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5.","status":"published","published":"2026-09-08T11:08:05Z","modified":"2026-11-02T19:46:10.565355471Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1790069660","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.","status":"published","published":"2026-09-22T09:34:20Z","modified":"2026-11-02T19:46:21.394928172Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069975","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.","status":"published","published":"2026-09-22T09:39:35Z","modified":"2026-11-02T19:46:22.513600671Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790070464","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.","status":"published","published":"2026-09-22T09:47:44Z","modified":"2026-11-02T19:46:20.26894182Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790071189","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.","status":"published","published":"2026-09-22T09:59:49Z","modified":"2026-11-02T19:46:20.152967042Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790074384","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.","status":"published","published":"2026-09-22T10:53:04Z","modified":"2026-11-02T19:46:21.573735323Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790878884","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.8.RELEASE-tuxcare.1.","status":"published","published":"2026-10-01T18:21:24Z","modified":"2026-11-02T19:46:24.362652026Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791213084","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T15:11:24Z","modified":"2026-11-02T19:46:26.002316843Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218458","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 28 CVEs. Fixed in 4.3.27.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:40:58Z","modified":"2026-11-02T19:46:26.143363772Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791218487","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1.","status":"published","published":"2026-10-05T16:41:27Z","modified":"2026-11-02T19:46:26.185897679Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1791289094","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1.","status":"published","published":"2026-10-06T12:18:14Z","modified":"2026-11-02T19:46:26.292239404Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791464212","title":"TuxCare security update for org.springframework (30 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 30 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.2.","status":"published","published":"2026-10-08T12:56:52Z","modified":"2026-11-02T19:46:26.886889936Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1792575333","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T09:35:33Z","modified":"2026-11-02T19:46:29.583097776Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590655","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:50:55Z","modified":"2026-11-02T19:46:30.234656173Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792590787","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 12 org.springframework packages to address 29 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.1.","status":"published","published":"2026-10-21T13:53:07Z","modified":"2026-11-02T19:46:29.631616099Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792591113","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 31 CVEs. Fixed in 5.3.15-tuxcare.1.","status":"published","published":"2026-10-21T13:58:33Z","modified":"2026-11-02T19:46:29.678370863Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793615948","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 17 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.3.","status":"published","published":"2026-11-02T11:39:09Z","modified":"2026-11-02T19:46:33.374523015Z","updated_at":"2026-11-02T20:28:42.34712Z"}]},"sources_more":{"osv":22}}