org.springframework:spring-expression vulnerabilities (Red Hat Lightwell)

7 vulnerabilities.

• org.springframework:spring-expression Red Hat Lightwell CVE-2025-41249: Spring Framework Annotation Detection Vulnerability CVE-2025-41249 Public exploitFix available 7.5 HighSeptember 16, 2025
• org.springframework:spring-expression Red Hat Lightwell CVE-2024-38816: Path traversal vulnerability in functional web frameworks CVE-2024-38816 Public exploitFix available EPSS 21.3% 7.5 HighSeptember 13, 2024
• org.springframework:spring-expression Red Hat Lightwell CVE-2024-38808: Spring Expression DoS Vulnerability CVE-2024-38808 Fix available 4.3 MediumAugust 20, 2024
• org.springframework:spring-expression Red Hat Lightwell CVE-2024-22243: Spring Framework URL Parsing with Host Validation CVE-2024-22243 Public exploitFix available 8.1 HighFebruary 23, 2024
• org.springframework:spring-expression Red Hat Lightwell Spring Framework vulnerable to denial of service CVE-2023-20863 Fix available 6.5 MediumApril 13, 2023
• org.springframework:spring-expression Red Hat Lightwell Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch CVE-2023-20860 Public exploitFix available 7.5 HighMarch 27, 2023
• org.springframework:spring-expression Red Hat Lightwell Spring Framework vulnerable to denial of service via specially crafted SpEL expression CVE-2023-20861 Fix available 6.5 MediumMarch 23, 2023