{"id":"CVE-2026-47891","aliases":["CLSA-2026-1787928056","CLSA-2026-1787928797","CLSA-2026-1788201541","CLSA-2026-1788253139","CLSA-2026-1788253370","CLSA-2026-1788274092","CLSA-2026-1788276305","CLSA-2026-1788276466","CLSA-2026-1788282862","CLSA-2026-1788283253","CLSA-2026-1788287051","CLSA-2026-1788342506","CLSA-2026-1788342969","CLSA-2026-1788346458","CLSA-2026-1788349142","CLSA-2026-1788425992","CLSA-2026-1788426306","CLSA-2026-1788426489","CLSA-2026-1788426505","CLSA-2026-1788426720","CLSA-2026-1788459185","CLSA-2026-1788800102","CLSA-2026-1788800921","CLSA-2026-1788802441","CLSA-2026-1788814705","CLSA-2026-1788869692","CLSA-2026-1788871245","CLSA-2026-1788876191","CLSA-2026-1789166016","CLSA-2026-1789377089","CLSA-2026-1789703693","CLSA-2026-1789722420","CLSA-2026-1790068633","CLSA-2026-1790068772","CLSA-2026-1790068919","CLSA-2026-1790069169","CLSA-2026-1790069660","CLSA-2026-1790069975","CLSA-2026-1790070167","CLSA-2026-1790070464","CLSA-2026-1790070671","CLSA-2026-1790071189","CLSA-2026-1790074384","CLSA-2026-1790089638","CLSA-2026-1790091092","CLSA-2026-1790102459","CLSA-2026-1790102528","CLSA-2026-1790102819","CLSA-2026-1790102888","CLSA-2026-1790123797","CLSA-2026-1790157664","CLSA-2026-1790161647","CLSA-2026-1790173926","CLSA-2026-1790174512","CLSA-2026-1790233969","CLSA-2026-1790234139","CLSA-2026-1790234279","CLSA-2026-1790857021","CLSA-2026-1790874046","CLSA-2026-1790949579","CLSA-2026-1790949640","CLSA-2026-1790952166","CLSA-2026-1790952864","CLSA-2026-1790970183","CLSA-2026-1790970528","CLSA-2026-1791019116","CLSA-2026-1791107509","CLSA-2026-1792590675","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1793057670","DEBIAN-CVE-2026-47891","EUVD-2026-66859","GHSA-7p67-m4j8-h4vx","UBUNTU-CVE-2026-47891"],"status":"published","title":"Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00522,"percentile":0.44761,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2026-08-27T05:21:39Z","modified":"2026-11-09T12:49:16Z","affected":[{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.11"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.10","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6","6.1.21-tuxcare.7","6.1.21-tuxcare.8","6.1.21-tuxcare.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.9"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4","6.1.20-tuxcare.5","6.1.20-tuxcare.6","6.1.20-tuxcare.7","6.1.20-tuxcare.8"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.19"},{"fixed":"6.2.19-tuxcare.1"}]}],"versions":["6.2.19"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.4"}]}],"versions":["6.2.1","6.2.1-tuxcare.1","6.2.1-tuxcare.2","6.2.1-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.4"}]}],"versions":["6.1.15","6.1.15-tuxcare.1","6.1.15-tuxcare.2","6.1.15-tuxcare.3"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.2"}]}],"versions":["6.2.13","6.2.13-tuxcare.1"],"bundled":25},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.7"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2","6.2.15-tuxcare.3","6.2.15-tuxcare.4","6.2.15-tuxcare.5","6.2.15-tuxcare.6"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.3"}]}],"versions":["6.1.16","6.1.16-tuxcare.1","6.1.16-tuxcare.2"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.3"}]}],"versions":["6.1.19","6.1.19-tuxcare.1","6.1.19-tuxcare.2"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.2"}]}],"versions":["6.1.13","6.1.13-tuxcare.1"],"bundled":24},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.6"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4","6.0.16-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.6"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4","6.0.16-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.6"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4","6.0.16-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.6"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4","6.0.16-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.6"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4","6.0.16-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.3"}]}],"versions":["6.1.7","6.1.7-tuxcare.1","6.1.7-tuxcare.2"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.7"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4","6.0.23-tuxcare.5","6.0.23-tuxcare.6"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.2"}]}],"versions":["6.1.4","6.1.4-tuxcare.1"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.2"}]}],"versions":["6.0.0","6.0.0-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.2"}]}],"versions":["6.0.0","6.0.0-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.2"}]}],"versions":["6.0.0","6.0.0-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.0-tuxcare.2"}]}],"versions":["6.0.0","6.0.0-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.2"}]}],"versions":["6.0.15","6.0.15-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.2"}]}],"versions":["6.0.15","6.0.15-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.2"}]}],"versions":["6.0.15","6.0.15-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.12"},{"fixed":"6.0.12-tuxcare.2"}]}],"versions":["6.0.12","6.0.12-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.12"},{"fixed":"6.0.12-tuxcare.2"}]}],"versions":["6.0.12","6.0.12-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.12"},{"fixed":"6.0.12-tuxcare.2"}]}],"versions":["6.0.12","6.0.12-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.2"}]}],"versions":["6.0.11","6.0.11-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.2"}]}],"versions":["6.0.11","6.0.11-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.2"}]}],"versions":["6.0.11","6.0.11-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.2"}]}],"versions":["6.0.11","6.0.11-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.3"}]}],"versions":["6.0.13","6.0.13-tuxcare.1","6.0.13-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.3"}]}],"versions":["6.0.13","6.0.13-tuxcare.1","6.0.13-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.22"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.13","5.3.39-tuxcare.14","5.3.39-tuxcare.15","5.3.39-tuxcare.16","5.3.39-tuxcare.17","5.3.39-tuxcare.18","5.3.39-tuxcare.19","5.3.39-tuxcare.20","5.3.39-tuxcare.21","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.22"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.13","5.3.39-tuxcare.14","5.3.39-tuxcare.15","5.3.39-tuxcare.16","5.3.39-tuxcare.17","5.3.39-tuxcare.18","5.3.39-tuxcare.19","5.3.39-tuxcare.20","5.3.39-tuxcare.21","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.22"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.13","5.3.39-tuxcare.14","5.3.39-tuxcare.15","5.3.39-tuxcare.16","5.3.39-tuxcare.17","5.3.39-tuxcare.18","5.3.39-tuxcare.19","5.3.39-tuxcare.20","5.3.39-tuxcare.21","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.22"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.13","5.3.39-tuxcare.14","5.3.39-tuxcare.15","5.3.39-tuxcare.16","5.3.39-tuxcare.17","5.3.39-tuxcare.18","5.3.39-tuxcare.19","5.3.39-tuxcare.20","5.3.39-tuxcare.21","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.2"}]}],"versions":["5.3.21","5.3.21-tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.10"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4","5.3.29-tuxcare.5","5.3.29-tuxcare.6","5.3.29-tuxcare.7","5.3.29-tuxcare.8","5.3.29-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.10"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4","5.3.29-tuxcare.5","5.3.29-tuxcare.6","5.3.29-tuxcare.7","5.3.29-tuxcare.8","5.3.29-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.10"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4","5.3.29-tuxcare.5","5.3.29-tuxcare.6","5.3.29-tuxcare.7","5.3.29-tuxcare.8","5.3.29-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.10"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4","5.3.29-tuxcare.5","5.3.29-tuxcare.6","5.3.29-tuxcare.7","5.3.29-tuxcare.8","5.3.29-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.10"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4","5.3.29-tuxcare.5","5.3.29-tuxcare.6","5.3.29-tuxcare.7","5.3.29-tuxcare.8","5.3.29-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.10"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4","5.3.30-tuxcare.5","5.3.30-tuxcare.6","5.3.30-tuxcare.7","5.3.30-tuxcare.8","5.3.30-tuxcare.9"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.9"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3","5.3.25-tuxcare.4","5.3.25-tuxcare.5","5.3.25-tuxcare.6","5.3.25-tuxcare.7","5.3.25-tuxcare.8"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.11"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.10","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7","5.3.37-tuxcare.8","5.3.37-tuxcare.9"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.11"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.10","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7","5.3.37-tuxcare.8","5.3.37-tuxcare.9"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.11"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.10","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7","5.3.37-tuxcare.8","5.3.37-tuxcare.9"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.11"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.10","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7","5.3.37-tuxcare.8","5.3.37-tuxcare.9"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.11"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.10","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6","5.3.37-tuxcare.7","5.3.37-tuxcare.8","5.3.37-tuxcare.9"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.14"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.10","5.3.31-tuxcare.11","5.3.31-tuxcare.12","5.3.31-tuxcare.13","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31-tuxcare.6","5.3.31-tuxcare.7","5.3.31-tuxcare.8","5.3.31-tuxcare.9","5.3.31.tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.14"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.10","5.3.31-tuxcare.11","5.3.31-tuxcare.12","5.3.31-tuxcare.13","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31-tuxcare.6","5.3.31-tuxcare.7","5.3.31-tuxcare.8","5.3.31-tuxcare.9","5.3.31.tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.14"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.10","5.3.31-tuxcare.11","5.3.31-tuxcare.12","5.3.31-tuxcare.13","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31-tuxcare.6","5.3.31-tuxcare.7","5.3.31-tuxcare.8","5.3.31-tuxcare.9","5.3.31.tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.14"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.10","5.3.31-tuxcare.11","5.3.31-tuxcare.12","5.3.31-tuxcare.13","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31-tuxcare.6","5.3.31-tuxcare.7","5.3.31-tuxcare.8","5.3.31-tuxcare.9","5.3.31.tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.14"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.10","5.3.31-tuxcare.11","5.3.31-tuxcare.12","5.3.31-tuxcare.13","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31-tuxcare.6","5.3.31-tuxcare.7","5.3.31-tuxcare.8","5.3.31-tuxcare.9","5.3.31.tuxcare"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.8"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3","5.3.24-tuxcare.4","5.3.24-tuxcare.5","5.3.24-tuxcare.6","5.3.24-tuxcare.7"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.9"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3","5.3.7-tuxcare.4","5.3.7-tuxcare.5","5.3.7-tuxcare.6","5.3.7-tuxcare.7","5.3.7-tuxcare.8"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.5"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","5.2.0.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.5"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","5.2.0.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.5"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","5.2.0.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0.RELEASE"},{"fixed":"5.2.0.RELEASE-tuxcare.5"}]}],"versions":["5.2.0.RELEASE","5.2.0.RELEASE-tuxcare.1","5.2.0.RELEASE-tuxcare.2","5.2.0.RELEASE-tuxcare.3","5.2.0.RELEASE-tuxcare.4"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":36},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":344,"products":[{"vendor":"spring","product":"spring framework"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://spring.io/security/cve-2026-47891","tags":["Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47891","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7p67-m4j8-h4vx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47891.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-47891","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-47891","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47891","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-47891","title":"Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T05:21:39.288Z","modified":"2026-08-27T14:52:30.491Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T13:36:29.327819Z"}],"euvd":[{"id":"EUVD-2026-66859","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T05:21:39Z","modified":"2026-08-27T14:52:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:01:28.115205Z"}],"ghsa":[{"id":"GHSA-7p67-m4j8-h4vx","title":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not...","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T06:31:34Z","modified":"2026-08-27T18:33:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:11:05.100142Z"}],"nvd":[{"id":"CVE-2026-47891","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T06:17:20.287Z","modified":"2026-09-02T17:36:38.023Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:12:42.035353Z"}],"osv":[{"id":"CVE-2026-47891","title":"Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T05:21:39.288Z","modified":"2026-10-28T02:30:24.741911985Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:06.701612Z"},{"id":"DEBIAN-CVE-2026-47891","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T06:17:20.287Z","modified":"2026-10-01T03:03:15.706747496Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:56.444225Z"},{"id":"UBUNTU-CVE-2026-47891","description":"A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier","status":"published","published":"2026-08-27T06:17:00Z","modified":"2026-11-09T12:49:16.585830886Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"CLSA-2026-1787928056","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 14 CVEs. Fixed in 6.1.21-tuxcare.11.","status":"published","published":"2026-08-28T14:40:56Z","modified":"2026-11-02T19:46:01.35039725Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787928797","title":"TuxCare security update for org.springframework (15 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 15 CVEs. Fixed in 6.1.20-tuxcare.9.","status":"published","published":"2026-08-28T14:53:17Z","modified":"2026-11-02T19:46:01.80310031Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788201541","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 17 CVEs. Fixed in 6.2.19-tuxcare.1.","status":"published","published":"2026-08-31T18:39:01Z","modified":"2026-11-02T19:46:02.876660676Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788253139","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.2.1-tuxcare.4.","status":"published","published":"2026-09-01T08:58:59Z","modified":"2026-11-02T19:46:02.08031646Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788253370","title":"TuxCare security update for org.springframework (32 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.","status":"published","published":"2026-09-01T09:02:50Z","modified":"2026-11-02T19:46:02.898287523Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788274092","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 20 CVEs. Fixed in 6.1.15-tuxcare.4.","status":"published","published":"2026-09-01T14:48:12Z","modified":"2026-11-02T19:46:04.729507312Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788276305","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 25 CVEs. Fixed in 6.2.13-tuxcare.2.","status":"published","published":"2026-09-01T15:25:05Z","modified":"2026-11-02T19:46:03.67461284Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788276466","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.15-tuxcare.7.","status":"published","published":"2026-09-01T15:27:46Z","modified":"2026-11-02T19:46:05.698704454Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788282862","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 21 CVEs. Fixed in 6.1.16-tuxcare.3.","status":"published","published":"2026-09-01T17:14:22Z","modified":"2026-11-02T19:46:05.053708757Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788283253","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3.","status":"published","published":"2026-09-01T17:20:53Z","modified":"2026-11-02T19:46:05.423199819Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788287051","title":"TuxCare security update for org.springframework (24 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2.","status":"published","published":"2026-09-01T18:24:11Z","modified":"2026-11-02T19:46:05.756623182Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788342506","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.6.","status":"published","published":"2026-09-02T09:48:26Z","modified":"2026-11-02T19:46:04.857740134Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788342969","title":"TuxCare security update for org.springframework (19 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 19 CVEs. Fixed in 6.1.7-tuxcare.3.","status":"published","published":"2026-09-02T09:56:09Z","modified":"2026-11-02T19:46:06.00848823Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788346458","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 12 CVEs. Fixed in 6.0.23-tuxcare.7.","status":"published","published":"2026-09-02T10:54:18Z","modified":"2026-11-02T19:46:03.007445365Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788349142","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 21 CVEs. Fixed in 6.1.4-tuxcare.2.","status":"published","published":"2026-09-02T11:39:02Z","modified":"2026-11-02T19:46:05.804140483Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788425992","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.0.0-tuxcare.2.","status":"published","published":"2026-09-03T08:59:52Z","modified":"2026-11-02T19:46:07.404310499Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788426306","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.0.15-tuxcare.2.","status":"published","published":"2026-09-03T09:05:06Z","modified":"2026-10-29T19:45:23.301714325Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788426489","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.0.12-tuxcare.2.","status":"published","published":"2026-09-03T09:08:09Z","modified":"2026-10-29T19:45:23.276724372Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788426505","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.0.11-tuxcare.2.","status":"published","published":"2026-09-03T09:08:25Z","modified":"2026-11-02T19:46:07.371884587Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788426720","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.13-tuxcare.3.","status":"published","published":"2026-09-03T09:12:00Z","modified":"2026-10-29T19:45:26.804585946Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788459185","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.39-tuxcare.22.","status":"published","published":"2026-09-03T18:13:05Z","modified":"2026-11-02T19:46:07.350571569Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788800102","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.21-tuxcare.2.","status":"published","published":"2026-09-07T16:55:02Z","modified":"2026-11-02T19:46:09.719521423Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788800921","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 5.3.29-tuxcare.10.","status":"published","published":"2026-09-07T17:08:41Z","modified":"2026-11-02T19:46:10.063247321Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788802441","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 5.3.30-tuxcare.10.","status":"published","published":"2026-09-07T17:34:01Z","modified":"2026-11-02T19:46:10.088526699Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788814705","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9.","status":"published","published":"2026-09-07T20:58:25Z","modified":"2026-11-02T19:46:13.672935614Z","updated_at":"2026-11-02T20:29:35.589477Z"},{"id":"CLSA-2026-1788869692","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 6 CVEs. Fixed in 5.3.37-tuxcare.11.","status":"published","published":"2026-09-08T12:14:52Z","modified":"2026-11-02T19:46:11.447416385Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788871245","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.14.","status":"published","published":"2026-09-08T12:40:45Z","modified":"2026-11-02T19:46:10.763763296Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1788876191","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 8 CVEs. Fixed in 5.3.24-tuxcare.8.","status":"published","published":"2026-09-08T14:03:11Z","modified":"2026-11-02T19:46:11.087021785Z","updated_at":"2026-11-02T20:29:40.716173Z"},{"id":"CLSA-2026-1789166016","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 6 CVEs. Fixed in 5.3.7-tuxcare.9.","status":"published","published":"2026-09-11T22:33:36Z","modified":"2026-11-02T19:46:13.673138525Z","updated_at":"2026-11-02T20:29:35.589477Z"},{"id":"CLSA-2026-1789377089","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.5.","status":"published","published":"2026-09-14T09:11:29Z","modified":"2026-11-02T19:46:13.076519781Z","updated_at":"2026-11-02T20:29:35.589477Z"},{"id":"CLSA-2026-1789703693","title":"TuxCare security update for org.springframework (36 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 36 CVEs. Fixed in 6.2.5-tuxcare.1.","status":"published","published":"2026-09-18T03:54:53Z","modified":"2026-11-02T19:46:19.189753568Z","updated_at":"2026-11-02T20:29:28.838259Z"},{"id":"CLSA-2026-1789722420","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1.","status":"published","published":"2026-09-18T09:07:00Z","modified":"2026-11-02T19:46:18.4339041Z","updated_at":"2026-11-02T20:29:28.838259Z"},{"id":"CLSA-2026-1790068633","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 6.0.14-tuxcare.1.","status":"published","published":"2026-09-22T09:17:13Z","modified":"2026-11-02T19:46:19.440429243Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790068772","title":"TuxCare security update for org.springframework (36 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.","status":"published","published":"2026-09-22T09:19:32Z","modified":"2026-11-02T19:46:19.638710531Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790068919","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 33 CVEs. Fixed in 6.2.14-tuxcare.1.","status":"published","published":"2026-09-22T09:21:59Z","modified":"2026-11-02T19:46:21.56620398Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069169","title":"TuxCare security update for org.springframework (32 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.3-tuxcare.1.","status":"published","published":"2026-09-22T09:26:09Z","modified":"2026-11-02T19:46:20.214671354Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069660","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1.","status":"published","published":"2026-09-22T09:34:20Z","modified":"2026-11-02T19:46:21.394928172Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790069975","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1.","status":"published","published":"2026-09-22T09:39:35Z","modified":"2026-11-02T19:46:22.513600671Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790070167","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 29 CVEs. Fixed in 5.3.32-tuxcare.1.","status":"published","published":"2026-09-22T09:42:47Z","modified":"2026-11-02T19:46:21.523523174Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790070464","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 35 CVEs. Fixed in 5.3.20-tuxcare.1.","status":"published","published":"2026-09-22T09:47:44Z","modified":"2026-11-02T19:46:20.26894182Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790070671","title":"TuxCare security update for org.springframework (32 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 5.3.33-tuxcare.1.","status":"published","published":"2026-09-22T09:51:11Z","modified":"2026-11-02T19:46:19.652652051Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790071189","title":"TuxCare security update for org.springframework (35 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 35 CVEs. Fixed in 5.3.23-tuxcare.1.","status":"published","published":"2026-09-22T09:59:49Z","modified":"2026-11-02T19:46:20.152967042Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790074384","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1.","status":"published","published":"2026-09-22T10:53:04Z","modified":"2026-11-02T19:46:21.573735323Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790089638","title":"TuxCare security update for org.springframework (33 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1.","status":"published","published":"2026-09-22T15:07:18Z","modified":"2026-11-02T19:46:21.559428645Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790091092","title":"TuxCare security update for org.springframework (13 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 13 CVEs. Fixed in 5.3.6-tuxcare.2.","status":"published","published":"2026-09-22T15:31:32Z","modified":"2026-11-02T19:46:20.468272729Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790102459","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 12 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.11.","status":"published","published":"2026-09-22T18:40:59Z","modified":"2026-11-02T19:46:20.878516594Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790102528","title":"TuxCare security update for org.springframework (12 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 12 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.2.","status":"published","published":"2026-09-22T18:42:08Z","modified":"2026-11-02T19:46:20.865168395Z","updated_at":"2026-11-02T20:29:27.085992Z"}]},"sources_more":{"osv":24}}