org.springframework.security:spring-security-web
Spring Security
Security Advisories for org.springframework.security:spring-security-web in maven
Moderate
about 2 months ago
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
maven
org.springframework.security:spring-security-web
Critical
3 months ago
Spring Security HTTP Headers Are not Written Under Some Conditions
maven
org.springframework.security:spring-security-web
Potential
High
9 months ago
Spring Security annotation detection mechanism has authorization bypass
maven
org.springframework.security:spring-security-core
Potential
Critical
about 1 year ago
Spring Security authorization bypass for method security annotations on private methods
maven
org.springframework.security:spring-security-aspects
Potential
Moderate
about 1 year ago
Spring Security Vulnerable to Authorization Bypass via Security Annotations
maven
org.springframework.security:spring-security-core
Potential
High
about 1 year ago
Spring Security Does Not Enforce Password Length
maven
org.springframework.security:spring-security-crypto
Critical
over 1 year ago
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
maven
org.springframework.security:spring-security-web
Potential
High
about 2 years ago
Erroneous authentication pass in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
over 2 years ago
Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
maven
org.springframework.security:spring-security-core
Potential
Moderate
over 2 years ago
Spring Security's spring-security.xsd file is world writable
maven
org.springframework.security:spring-security-config
Potential
Moderate
about 4 years ago
Integer overflow in BCrypt class in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
about 4 years ago
Improper Authentication in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
almost 5 years ago
Resource Exhaustion in Spring Security
maven
org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-core
High
about 5 years ago
Privilege escalation in spring security
maven
org.springframework.security:spring-security-web
Potential
Critical
over 5 years ago
Authorization Bypass in Spring Security
maven
org.springframework.security:spring-security-core
Potential
High
over 7 years ago
Spring Security vulnerable to Authorization Bypass
maven
org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-core
Potential
High
over 7 years ago
Spring Security and Spring Framework may not recognize certain paths that should be protected
maven
org.springframework.security:spring-security-core, org.springframework:spring-core