{"id":"CVE-2024-38828","aliases":["CLSA-2025-1743120048","CLSA-2025-1751328209","CLSA-2025-1756771563","CLSA-2025-1760313981","CLSA-2025-1760313986","CLSA-2025-1761696401","CLSA-2025-1762906011","CLSA-2025-1765411678","CLSA-2026-1777250292","CLSA-2026-1777509589","CLSA-2026-1782954026","CLSA-2026-1786552823","CLSA-2026-1786569587","CLSA-2026-1786609560","CLSA-2026-1788360559","CLSA-2026-1789427454","CLSA-2026-1790070464","CLSA-2026-1790071189","CLSA-2026-1790089638","CLSA-2026-1790123797","CLSA-2026-1790174512","CLSA-2026-1790952166","CLSA-2026-1792601588","CLSA-2026-1793881017","CLSA-2026-1793885497","CLSA-2026-1793886526","CLSA-2026-1793887544","CLSA-2026-1793889159","CLSA-2026-1793890045","CLSA-2026-1793894396","CLSA-2026-1793897475","CLSA-2026-1793899775","CLSA-2026-1793901153","CLSA-2026-1793902842","CLSA-2026-1793906268","CLSA-2026-1794157893","CLSA-2026-1794160418","CLSA-2026-1794181296","CLSA-2026-1794184482","CLSA-2026-1794186303","CLSA-2026-1794210853","CLSA-2026-1794238635","CLSA-2026-1794239004","CLSA-2026-1794240621","CLSA-2026-1794243371","CLSA-2026-1794243768","CLSA-2026-1794244347","CLSA-2026-1794244803","DEBIAN-CVE-2024-38828","EUVD-2024-3320","GHSA-7phw-cxx7-q9vq","GHSA-cx7f-g6mp-7hqm","GHSA-g5vr-rgqm-vf78","GHSA-r936-gwx5-v52f","GHSA-w3c8-7r8f-9jp8","RHLW-2026-67afc831a93ff9cc","ROOT-APP-MAVEN-CVE-2024-38828","UBUNTU-CVE-2024-38828"],"status":"published","title":"CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00724,"percentile":0.54372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-400"],"published":"2024-11-18T03:45:46Z","modified":"2026-11-10T01:15:05Z","exploits":[{"source":"pocgithub","id":"First-Roman/sprig-mvc-demo-patch","title":"First-Roman/sprig-mvc-demo-patch","date":"2025-04-14","url":"https://github.com/First-Roman/sprig-mvc-demo-patch"},{"source":"pocgithub","id":"topilov/axiom-jdk-test-task","title":"topilov/axiom-jdk-test-task","date":"2025-04-21","url":"https://github.com/topilov/axiom-jdk-test-task"},{"source":"pocgithub","id":"funcid/CVE-2024-38828","title":"funcid/CVE-2024-38828","date":"2025-04-22","url":"https://github.com/funcid/CVE-2024-38828"}],"fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-webmvc","fixed_in":["5.3.42"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","fixed_in":["5.3.39.tuxcare.4","5.3.37-tuxcare.8","5.2.0.RELEASE-tuxcare.9","4.3.21.RELEASE-tuxcare.4","5.1.3.RELEASE-tuxcare.5","5.2.9.RELEASE-tuxcare.4"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.springframework:spring-webmvc","fixed_in":["5.3.20-aikido.3","5.3.20-aikido.4","5.3.23-aikido.4","5.3.23-aikido.5","5.3.20-aikido.5","5.3.23-aikido.6","5.3.20-aikido.6","5.3.20-aikido.7","5.3.20-aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-webmvc","fixed_in":["5.3.20-root.io.3","5.3.20-root.io.4","5.3.23-root.io.4","5.3.23-root.io.5","5.3.20-root.io.5","5.3.23-root.io.6","5.3.20-root.io.6","5.3.20-root.io.7","5.3.20-root.io.8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.42"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39.tuxcare.4"}]}],"versions":["5.3.39","5.3.39.tuxcare.1","5.3.39.tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27.tuxcare.1"}]}],"versions":["5.3.27"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.1"}]}],"versions":["4.3.30.RELEASE"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.RELEASE"},{"fixed":"4.0.0.RELEASE-tuxcare.1"}]}],"versions":["4.0.0.RELEASE"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-oxm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.1.RELEASE"},{"fixed":"3.1.1.RELEASE-tuxcare.1"}]}],"versions":["3.1.1.RELEASE"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.1"}]}],"versions":["5.3.31","5.3.31.tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.1"}]}],"versions":["5.3.30"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.2"}]}],"versions":["5.3.29","5.3.29-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.1"}]}],"versions":["5.3.25"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.2"}]}],"versions":["5.3.24","5.3.24-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.8"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.5"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.5"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.5"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.5"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.5"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.9"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3","5.2.13.RELEASE-tuxcare.4","5.2.13.RELEASE-tuxcare.5","5.2.13.RELEASE-tuxcare.6","5.2.13.RELEASE-tuxcare.7","5.2.13.RELEASE-tuxcare.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.9"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3","5.2.13.RELEASE-tuxcare.4","5.2.13.RELEASE-tuxcare.5","5.2.13.RELEASE-tuxcare.6","5.2.13.RELEASE-tuxcare.7","5.2.13.RELEASE-tuxcare.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.6"},{"fixed":"5.3.6-tuxcare.1"}]}],"versions":["5.3.6"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.20"},{"fixed":"5.3.20-tuxcare.1"}]}],"versions":["5.3.20"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.23"},{"fixed":"5.3.23-tuxcare.1"}]}],"versions":["5.3.23"],"bundled":35},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.9"},{"fixed":"5.3.9-tuxcare.1"}]}],"versions":["5.3.9"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.3"},{"fixed":"5.3.3-tuxcare.1"}]}],"versions":["5.3.3"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8.RELEASE"},{"fixed":"5.2.8.RELEASE-tuxcare.1"}]}],"versions":["5.2.8.RELEASE"],"bundled":26},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.5"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3","5.1.5.RELEASE-tuxcare.4"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.5"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3","5.1.5.RELEASE-tuxcare.4"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.5"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3","5.1.5.RELEASE-tuxcare.4"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.5.RELEASE"},{"fixed":"5.1.5.RELEASE-tuxcare.5"}]}],"versions":["5.1.5.RELEASE","5.1.5.RELEASE-tuxcare.1","5.1.5.RELEASE-tuxcare.2","5.1.5.RELEASE-tuxcare.3","5.1.5.RELEASE-tuxcare.4"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.2"}]}],"versions":["4.3.26.RELEASE","4.3.26.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.2"}]}],"versions":["4.3.26.RELEASE","4.3.26.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.26.RELEASE"},{"fixed":"4.3.26.RELEASE-tuxcare.2"}]}],"versions":["4.3.26.RELEASE","4.3.26.RELEASE-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.19"},{"fixed":"5.3.19-tuxcare.4"}]}],"versions":["5.3.19","5.3.19-tuxcare.1","5.3.19-tuxcare.2","5.3.19-tuxcare.3"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.11.RELEASE"},{"fixed":"5.2.11.RELEASE-tuxcare.4"}]}],"versions":["5.2.11.RELEASE","5.2.11.RELEASE-tuxcare.1","5.2.11.RELEASE-tuxcare.2","5.2.11.RELEASE-tuxcare.3"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.18"},{"fixed":"5.3.18-tuxcare.4"}]}],"versions":["5.3.18","5.3.18-tuxcare.1","5.3.18-tuxcare.2","5.3.18-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.4"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2","5.2.10.RELEASE-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.4"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2","5.2.10.RELEASE-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.4"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2","5.2.10.RELEASE-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.10.RELEASE"},{"fixed":"5.2.10.RELEASE-tuxcare.4"}]}],"versions":["5.2.10.RELEASE","5.2.10.RELEASE-tuxcare.1","5.2.10.RELEASE-tuxcare.2","5.2.10.RELEASE-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.4"}]}],"versions":["5.2.17.RELEASE","5.2.17.RELEASE-tuxcare.1","5.2.17.RELEASE-tuxcare.2","5.2.17.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.4"}]}],"versions":["5.2.17.RELEASE","5.2.17.RELEASE-tuxcare.1","5.2.17.RELEASE-tuxcare.2","5.2.17.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.4"}]}],"versions":["5.2.17.RELEASE","5.2.17.RELEASE-tuxcare.1","5.2.17.RELEASE-tuxcare.2","5.2.17.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.17.RELEASE"},{"fixed":"5.2.17.RELEASE-tuxcare.4"}]}],"versions":["5.2.17.RELEASE","5.2.17.RELEASE-tuxcare.1","5.2.17.RELEASE-tuxcare.2","5.2.17.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.4"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2","5.2.7.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.4"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2","5.2.7.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.4"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2","5.2.7.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.4"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2","5.2.7.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.7.RELEASE"},{"fixed":"5.2.7.RELEASE-tuxcare.4"}]}],"versions":["5.2.7.RELEASE","5.2.7.RELEASE-tuxcare.1","5.2.7.RELEASE-tuxcare.2","5.2.7.RELEASE-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.9"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","5.2.0.RELEASE-tuxcare.4","5.2.0.RELEASE-tuxcare.5","5.2.0.RELEASE-tuxcare.6","5.2.0.RELEASE-tuxcare.7","5.2.0.RELEASE-tuxcare.8"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.19.RELEASE"},{"fixed":"5.0.19.RELEASE-tuxcare.4"}]}],"versions":["5.0.19.RELEASE","5.0.19.RELEASE-tuxcare.1","5.0.19.RELEASE-tuxcare.2","5.0.19.RELEASE-tuxcare.3"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.25.RELEASE"},{"fixed":"5.2.25.RELEASE-tuxcare.5"}]}],"versions":["5.2.25.RELEASE","5.2.25.RELEASE-tuxcare.1","5.2.25.RELEASE-tuxcare.2","5.2.25.RELEASE-tuxcare.3","5.2.25.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.25.RELEASE"},{"fixed":"5.2.25.RELEASE-tuxcare.5"}]}],"versions":["5.2.25.RELEASE","5.2.25.RELEASE-tuxcare.1","5.2.25.RELEASE-tuxcare.2","5.2.25.RELEASE-tuxcare.3","5.2.25.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.25.RELEASE"},{"fixed":"5.2.25.RELEASE-tuxcare.5"}]}],"versions":["5.2.25.RELEASE","5.2.25.RELEASE-tuxcare.1","5.2.25.RELEASE-tuxcare.2","5.2.25.RELEASE-tuxcare.3","5.2.25.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.7"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4","4.3.25.RELEASE-tuxcare.5","4.3.25.RELEASE-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.7"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3","4.3.25.RELEASE-tuxcare.4","4.3.25.RELEASE-tuxcare.5","4.3.25.RELEASE-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.8"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5","5.1.20.RELEASE-tuxcare.6","5.1.20.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.8"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5","5.1.20.RELEASE-tuxcare.6","5.1.20.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.8"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2","5.1.20.RELEASE-tuxcare.3","5.1.20.RELEASE-tuxcare.4","5.1.20.RELEASE-tuxcare.5","5.1.20.RELEASE-tuxcare.6","5.1.20.RELEASE-tuxcare.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.21.RELEASE"},{"fixed":"4.3.21.RELEASE-tuxcare.4"}]}],"versions":["4.3.21.RELEASE","4.3.21.RELEASE-tuxcare.1","4.3.21.RELEASE-tuxcare.2","4.3.21.RELEASE-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.3"}]}],"versions":["5.3.15","5.3.15-tuxcare.1","5.3.15-tuxcare.2"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.3"}]}],"versions":["5.3.15","5.3.15-tuxcare.1","5.3.15-tuxcare.2"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.3"}]}],"versions":["5.3.15","5.3.15-tuxcare.1","5.3.15-tuxcare.2"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.3"}]}],"versions":["5.3.15","5.3.15-tuxcare.1","5.3.15-tuxcare.2"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.15"},{"fixed":"5.3.15-tuxcare.3"}]}],"versions":["5.3.15","5.3.15-tuxcare.1","5.3.15-tuxcare.2"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.3.RELEASE"},{"fixed":"5.1.3.RELEASE-tuxcare.5"}]}],"versions":["5.1.3.RELEASE","5.1.3.RELEASE-tuxcare.1","5.1.3.RELEASE-tuxcare.2","5.1.3.RELEASE-tuxcare.3","5.1.3.RELEASE-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.9.RELEASE"},{"fixed":"5.2.9.RELEASE-tuxcare.4"}]}],"versions":["5.2.9.RELEASE","5.2.9.RELEASE-tuxcare.1","5.2.9.RELEASE-tuxcare.2","5.2.9.RELEASE-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.20.RELEASE"},{"fixed":"4.3.20.RELEASE-tuxcare.3"}]}],"versions":["4.3.20.RELEASE","4.3.20.RELEASE-tuxcare.1","4.3.20.RELEASE-tuxcare.2"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.20.RELEASE"},{"fixed":"4.3.20.RELEASE-tuxcare.3"}]}],"versions":["4.3.20.RELEASE","4.3.20.RELEASE-tuxcare.1","4.3.20.RELEASE-tuxcare.2"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.20.RELEASE"},{"fixed":"4.3.20.RELEASE-tuxcare.3"}]}],"versions":["4.3.20.RELEASE","4.3.20.RELEASE-tuxcare.1","4.3.20.RELEASE-tuxcare.2"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.20.RELEASE"},{"fixed":"4.3.20.RELEASE-tuxcare.3"}]}],"versions":["4.3.20.RELEASE","4.3.20.RELEASE-tuxcare.1","4.3.20.RELEASE-tuxcare.2"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.4"}]}],"versions":["5.1.18.RELEASE","5.1.18.RELEASE-tuxcare.1","5.1.18.RELEASE-tuxcare.2","5.1.18.RELEASE-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.18.RELEASE"},{"fixed":"5.1.18.RELEASE-tuxcare.4"}]}],"versions":["5.1.18.RELEASE","5.1.18.RELEASE-tuxcare.1","5.1.18.RELEASE-tuxcare.2","5.1.18.RELEASE-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.5"}]}],"versions":["5.1.19.RELEASE","5.1.19.RELEASE-tuxcare.1","5.1.19.RELEASE-tuxcare.2","5.1.19.RELEASE-tuxcare.3","5.1.19.RELEASE-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.19.RELEASE"},{"fixed":"5.1.19.RELEASE-tuxcare.5"}]}],"versions":["5.1.19.RELEASE","5.1.19.RELEASE-tuxcare.1","5.1.19.RELEASE-tuxcare.2","5.1.19.RELEASE-tuxcare.3","5.1.19.RELEASE-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1.RELEASE"},{"fixed":"5.1.1.RELEASE-tuxcare.1"}]}],"versions":["5.1.1.RELEASE"],"bundled":33},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4","4.3.30-5","4.3.30-6","5.1.20-1"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.3.42"}]}],"versions":["5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.20","5.3.21","5.3.22","5.3.23","5.3.24","5.3.25","5.3.26","5.3.27","5.3.28","5.3.29","5.3.3","5.3.30","5.3.31","5.3.32","5.3.33","5.3.34","5.3.35","5.3.36","5.3.37","5.3.38","5.3.39","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["1.0","1.0-rc1","1.0.1","1.1","1.1-rc1","1.1-rc2","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.2","1.2-rc1","1.2-rc2","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0","2.0-m1","2.0-m2","2.0-m3","2.0-m4","2.0-m5","2.0-rc1","2.0-rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.5","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.6.SEC01","2.5.6.SEC02","2.5.6.SEC03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.10.RELEASE","3.2.11.RELEASE","3.2.12.RELEASE","3.2.13.RELEASE","3.2.14.RELEASE","3.2.15.RELEASE","3.2.16.RELEASE","3.2.17.RELEASE","3.2.18.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.2.5.RELEASE","3.2.6.RELEASE","3.2.7.RELEASE","3.2.8.RELEASE","3.2.9.RELEASE","4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"],"bundled":9},{"source":"osv","ecosystem":"Root:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-aikido.3"},{"fixed":"5.3.20-aikido.4"},{"fixed":"5.3.23-aikido.4"},{"fixed":"5.3.23-aikido.5"},{"fixed":"5.3.20-aikido.5"},{"fixed":"5.3.23-aikido.6"},{"fixed":"5.3.20-aikido.6"},{"fixed":"5.3.20-aikido.7"},{"fixed":"5.3.20-aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.20-root.io.3"},{"fixed":"5.3.20-root.io.4"},{"fixed":"5.3.23-root.io.4"},{"fixed":"5.3.23-root.io.5"},{"fixed":"5.3.20-root.io.5"},{"fixed":"5.3.23-root.io.6"},{"fixed":"5.3.20-root.io.6"},{"fixed":"5.3.20-root.io.7"},{"fixed":"5.3.20-root.io.8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":17,"products":[{"vendor":"spring","product":"spring"},{"vendor":"vmware","product":"spring"}],"references":[{"url":"https://spring.io/security/cve-2024-38828","tags":["web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20250509-0009/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38828","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250509-0009","tags":["web"]},{"url":"https://github.com/advisories/GHSA-w3c8-7r8f-9jp8","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-38828","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://spring.io/security/cve-2023-20860","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/20xxx/CVE-2023-20860.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20860","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7phw-cxx7-q9vq","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38816","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38816","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cx7f-g6mp-7hqm","tags":["advisory"]},{"url":"https://spring.io/security/cve-2024-38819","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38819","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g5vr-rgqm-vf78","tags":["advisory"]},{"url":"http://spring.io/security/cve-2025-41242","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41242","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r936-gwx5-v52f","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22741","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22745","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-38828","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-38828","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-38828","title":"CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T03:45:46.542Z","modified":"2025-05-09T20:03:35.921Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-3320","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T03:45:46Z","modified":"2025-05-09T20:03:35Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:32:50.201515Z"}],"ghsa":[{"id":"GHSA-w3c8-7r8f-9jp8","title":"Spring MVC controller vulnerable to a DoS attack","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T06:30:35Z","modified":"2025-05-09T21:35:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:43.172412Z"}],"nvd":[{"id":"CVE-2024-38828","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T04:15:04.233Z","modified":"2026-06-17T07:41:07.473Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:37.281254Z"}],"osv":[{"id":"DEBIAN-CVE-2024-38828","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T04:15:04.233Z","modified":"2026-11-02T12:02:43.39453525Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"GHSA-w3c8-7r8f-9jp8","title":"Spring MVC controller vulnerable to a DoS attack","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T06:30:35Z","modified":"2025-05-09T21:35:47Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:58.04805Z"},{"id":"RHLW-2026-67afc831a93ff9cc","title":"Lightwell Security Advisory: spring-webmvc 5.3.18.rhlw-00010","description":"Red Hat Lightwell has released org.springframework:spring-webmvc 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2024-38816, CVE-2024-38819, CVE-2024-38828, CVE-2025-41242, CVE-2026-22735, CVE-2026-22737, CVE-2026-22741, and CVE-2026-22745.\n\nCVE-2023-20860: Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using \"**\" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.\n\nCVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n\nSpecifically, an application is vulnerable when both of the following are true:\n\n  *  the web application uses RouterFunctions to serve static resources\n  *  resource handling is explicitly configured with a FileSystemResource location\n\n\nHowever, malicious requests are blocked and rejected when any of the following is true:\n\n  *  the  Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html  is in use\n  *  the application runs on Tomcat or Jetty\n\nCVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n\nCVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.\n\nCVE-2025-41242: Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.\n\nAn application can be vulnerable when all the following are true:\n\n  *  the application is deployed as a WAR or with an embedded Servlet container\n  *  the Servlet container  does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization \n  *  the application  serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with Spring resource handling\n\n\nWe have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.\n\nThis patched artifact is a drop-in replacement for org.springframework:spring-webmvc 5.3.18 from Maven Central.","status":"published","published":"2026-10-09T20:39:47Z","modified":"2026-10-27T04:13:01.135475674Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2024-38828","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.","status":"published","published":"2024-11-18T04:15:00Z","modified":"2026-10-17T12:56:37.383198544Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:54.69008Z"},{"id":"CLSA-2025-1743120048","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.3.39.tuxcare.4.","status":"published","published":"2026-08-04T14:52:03Z","modified":"2026-10-30T07:30:05.700527988Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751328209","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-11-02T19:45:08.377361739Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1756771563","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 16 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.298419109Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313981","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.002032675Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1760313986","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:07.855395278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1761696401","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-11-02T19:45:10.096302325Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1762906011","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:08.3726791Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1765411678","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:15.748542278Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777250292","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 5 CVEs. Fixed in 5.3.25-tuxcare.1.","status":"published","published":"2026-08-04T14:52:28Z","modified":"2026-11-02T19:45:28.37739212Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1777509589","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.2.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-11-02T19:45:25.314132971Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1782954026","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.3.37-tuxcare.8.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-10-29T19:45:12.069157748Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1786552823","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5.","status":"published","published":"2026-08-12T16:40:23Z","modified":"2026-11-02T19:45:53.423016803Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786569587","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.9.","status":"published","published":"2026-08-12T21:19:47Z","modified":"2026-11-02T19:45:53.415980082Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786609560","title":"TuxCare security update for org.grails (18 CVEs)","description":"TuxCare rebuilt 33 org.grails packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.","status":"withdrawn","published":"2026-08-13T08:26:00Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1788360559","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.","status":"published","published":"2026-09-02T14:49:19Z","modified":"2026-11-02T19:46:04.773724636Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1789427454","title":"TuxCare security update for org.springframework (18 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1.","status":"published","published":"2026-09-14T23:10:54Z","modified":"2026-11-02T19:46:16.037836811Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1790070464","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.","status":"published","published":"2026-09-22T09:47:44Z","modified":"2026-11-02T19:46:20.26894182Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790071189","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.","status":"published","published":"2026-09-22T09:59:49Z","modified":"2026-11-02T19:46:20.152967042Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790089638","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1.","status":"published","published":"2026-09-22T15:07:18Z","modified":"2026-11-02T19:46:21.559428645Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790123797","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 5.3.3-tuxcare.1.","status":"published","published":"2026-09-23T00:36:37Z","modified":"2026-11-02T19:46:20.664848902Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790174512","title":"TuxCare security update for org.springframework (26 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 26 CVEs. Fixed in 5.2.8.RELEASE-tuxcare.1.","status":"published","published":"2026-09-23T14:41:52Z","modified":"2026-11-02T19:46:22.478941095Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790952166","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.5.","status":"published","published":"2026-10-02T14:42:46Z","modified":"2026-11-02T19:46:26.145776644Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1792601588","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.2.","status":"published","published":"2026-10-21T16:53:08Z","modified":"2026-11-02T19:46:30.51398416Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793881017","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 5.3.19-tuxcare.4.","status":"published","published":"2026-11-05T13:16:58Z","modified":"2026-11-06T13:15:03.926485709Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793885497","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 13 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T14:31:38Z","modified":"2026-11-06T13:15:20.810473169Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793886526","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.18-tuxcare.4.","status":"published","published":"2026-11-05T14:48:47Z","modified":"2026-11-06T13:15:20.830616098Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793887544","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T15:05:45Z","modified":"2026-11-06T13:15:22.295465885Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793889159","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.2.17.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T15:32:39Z","modified":"2026-11-06T13:15:20.822000289Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793890045","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 4 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T15:47:26Z","modified":"2026-11-06T13:15:09.688604063Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793894396","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.9.","status":"published","published":"2026-11-05T16:59:56Z","modified":"2026-11-06T13:15:20.819075991Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793897475","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T17:51:16Z","modified":"2026-11-06T13:15:20.812298518Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793899775","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 4 CVEs. Fixed in 5.2.25.RELEASE-tuxcare.5.","status":"published","published":"2026-11-05T18:29:35Z","modified":"2026-11-06T13:15:09.688083972Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793901153","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.7.","status":"published","published":"2026-11-05T18:52:34Z","modified":"2026-11-06T13:15:22.304560782Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793902842","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.8.","status":"published","published":"2026-11-05T19:20:42Z","modified":"2026-11-06T13:15:23.24969169Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793906268","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 4.3.21.RELEASE-tuxcare.4.","status":"published","published":"2026-11-05T20:17:49Z","modified":"2026-11-06T13:15:14.368075129Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794157893","title":"TuxCare security update for org.springframework (16 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 16 CVEs. Fixed in 5.3.15-tuxcare.3.","status":"published","published":"2026-11-08T18:11:34Z","modified":"2026-11-08T19:30:02.435304162Z","updated_at":"2026-11-08T19:39:23.584635Z"},{"id":"CLSA-2026-1794160418","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.1.3.RELEASE-tuxcare.5.","status":"published","published":"2026-11-08T18:53:39Z","modified":"2026-11-09T01:45:03.236690657Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794181296","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 5.2.9.RELEASE-tuxcare.4.","status":"published","published":"2026-11-09T00:41:37Z","modified":"2026-11-09T07:15:05.129842595Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794184482","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 9 CVEs. Fixed in 4.3.20.RELEASE-tuxcare.3.","status":"published","published":"2026-11-09T01:34:43Z","modified":"2026-11-09T07:15:04.233287525Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794186303","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.1.18.RELEASE-tuxcare.4.","status":"published","published":"2026-11-09T02:05:04Z","modified":"2026-11-09T07:15:04.229806312Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794210853","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.5.","status":"published","published":"2026-11-09T08:54:14Z","modified":"2026-11-09T19:15:08.616297168Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794238635","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.1.1.RELEASE-tuxcare.1.","status":"published","published":"2026-11-09T16:37:16Z","modified":"2026-11-09T19:15:14.55405795Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794239004","title":"TuxCare security update for org.springframework:spring-webmvc (2 CVEs)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 2 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.15.","status":"published","published":"2026-11-09T16:43:25Z","modified":"2026-11-09T19:15:15.038218875Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794240621","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 4.1.7.RELEASE-tuxcare.8.","status":"published","published":"2026-11-09T17:10:22Z","modified":"2026-11-09T19:15:14.189556111Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794243371","title":"TuxCare security update for org.springframework:spring-webmvc (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 1 CVE. Fixed in 4.1.9.RELEASE-tuxcare.4.","status":"published","published":"2026-11-09T17:56:12Z","modified":"2026-11-09T19:15:15.040733561Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794243768","title":"TuxCare security update for org.springframework:spring-webmvc (2 CVEs)","description":"TuxCare rebuilt org.springframework:spring-webmvc to address 2 CVEs. Fixed in 4.3.5.RELEASE-tuxcare.4.","status":"published","published":"2026-11-09T18:02:49Z","modified":"2026-11-09T19:15:14.647987151Z","updated_at":"2026-11-09T19:38:09.278998Z"}]},"sources_more":{"osv":4}}