org.springframework.security:spring-security-config
Spring Security
Security Advisories for org.springframework.security:spring-security-config in maven
High
about 2 months ago
Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules
maven
org.springframework.security:spring-security-config
High
about 2 months ago
Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers
maven
org.springframework.security:spring-security-config
Potential
High
9 months ago
Spring Security annotation detection mechanism has authorization bypass
maven
org.springframework.security:spring-security-core
Potential
Critical
about 1 year ago
Spring Security authorization bypass for method security annotations on private methods
maven
org.springframework.security:spring-security-aspects
Potential
Moderate
about 1 year ago
Spring Security Vulnerable to Authorization Bypass via Security Annotations
maven
org.springframework.security:spring-security-core
Potential
High
about 1 year ago
Spring Security Does Not Enforce Password Length
maven
org.springframework.security:spring-security-crypto
Potential
Critical
over 1 year ago
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
maven
org.springframework.security:spring-security-web
Potential
High
about 2 years ago
Erroneous authentication pass in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
over 2 years ago
Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
maven
org.springframework.security:spring-security-core
Moderate
over 2 years ago
Spring Security's spring-security.xsd file is world writable
maven
org.springframework.security:spring-security-config
Critical
almost 3 years ago
Access Control Bypass in Spring Security
maven
org.springframework.security:spring-security-config
High
almost 3 years ago
Spring Security's authorization rules can be misconfigured when using multiple servlets
maven
org.springframework.security:spring-security-config
Potential
Moderate
about 4 years ago
Integer overflow in BCrypt class in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
about 4 years ago
Improper Authentication in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
almost 5 years ago
Resource Exhaustion in Spring Security
maven
org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-core
Potential
High
about 5 years ago
Privilege escalation in spring security
maven
org.springframework.security:spring-security-web
Potential
Critical
almost 6 years ago
Authorization Bypass in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
over 7 years ago
Spring Security vulnerable to Authorization Bypass
maven
org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-core
Potential
High
over 7 years ago
Spring Security and Spring Framework may not recognize certain paths that should be protected
maven
org.springframework.security:spring-security-core, org.springframework:spring-core