Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.springframework:spring-expression

maven

Spring Expression Language (SpEL)

View on github.com · View on repo1.maven.org

Moderate Security Advisories for org.springframework:spring-expression in maven Clear Filters

Moderate
about 2 months ago

Spring Framework Denial of Service via Unbounded Cache in SpEL GSA_kwCzR0hTQS13eHBwLTU2cTYtNXBjZ84ABYVA

maven org.springframework:spring-expression
Potential
Moderate
about 1 year ago

Spring Framework vulnerable to a reflected file download (RFD) GSA_kwCzR0hTQS02cjNjLXhmNHctanhqbc4ABJA-

maven org.springframework:spring-web
Potential
Moderate
over 1 year ago

Spring Framework has Authorization Bypass for Case Sensitive Comparisons GSA_kwCzR0hTQS1xM3Y2LWhtMnYtcHc5Oc4ABB-q

maven org.springframework.security:spring-security-core
Potential
Moderate
almost 2 years ago

Spring Framework DataBinder Case Sensitive Match Exception GSA_kwCzR0hTQS00Z2M3LTVqN2gtNHFwaM4ABAa0

maven org.springframework:spring-web, org.springframework:spring-context
Potential
Moderate
almost 2 years ago

Spring Framework DoS via conditional HTTP request GSA_kwCzR0hTQS0ycm1qLW1xNjctaDk3Z84AA_vW

maven org.springframework:spring-web
Moderate
almost 2 years ago

Spring Framework vulnerable to Denial of Service GSA_kwCzR0hTQS05Y21xLW05ajUtbXZ3d84AA-yn

maven org.springframework:spring-expression
Moderate
over 3 years ago

Spring Framework vulnerable to denial of service via specially crafted SpEL expression GSA_kwCzR0hTQS01NjRyLWhqN3YtbWNyNc4AAyQv

maven org.springframework:spring-expression
Potential
Moderate
about 4 years ago

Improper Control of Generation of Code ('Code Injection') in Spring Framework GSA_kwCzR0hTQS12cHIzLWY1OTQtbWc1Z84AAcrl

maven org.springframework:spring
Potential
Moderate
about 4 years ago

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data GSA_kwCzR0hTQS1mODY2LW05bXYtMnhyM84AAWLy

maven org.springframework.security:spring-security-core, org.springframework:spring-core
Potential
Moderate
about 4 years ago

Improper Neutralization of Input During Web Page Generation in Spring Framework GSA_kwCzR0hTQS1mZjdwLWpxam0tdjY2aM4AATvq

maven org.springframework:spring-webmvc
Potential
Moderate
about 4 years ago

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework GSA_kwCzR0hTQS1yaGNnLXJ3aHgtcWozas4AATUm

maven org.springframework:spring-core
Potential
Moderate
about 4 years ago

Cross-Site Request Forgery in Spring Framework GSA_kwCzR0hTQS1nNmhmLWY5Y3EtcTd3N83o4w

maven org.springframework:spring-web
Potential
Moderate
about 4 years ago

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework GSA_kwCzR0hTQS1oaG00LWh3cTYtM2M2d83o4g

maven org.springframework:spring-webmvc
Potential
Moderate
about 4 years ago

Missing XML Validation in Spring Framework GSA_kwCzR0hTQS12cDYzLXJyY20tOW1waM3o-Q

maven org.springframework:spring-oxm
Potential
Moderate
about 4 years ago

Cross-Site Request Forgery in Spring Framework GSA_kwCzR0hTQS04Y21tLXFqOGctZmNwNs3o_A

maven org.springframework:spring-webmvc
Potential
Moderate
about 4 years ago

Cross-Site Request Forgery in Spring Framework GSA_kwCzR0hTQS1ycDRwLWc2OXItNDM4eM3pDQ

maven org.springframework:spring-oxm
Potential
Moderate
about 4 years ago

Allocation of Resources Without Limits or Throttling in Spring Framework GSA_kwCzR0hTQS1ycXBoLXZxd20tMjJ2Y83lzA

maven org.springframework:spring-messaging
Potential
Moderate
about 4 years ago

Improper Neutralization of Input During Web Page Generation in Spring Framework GSA_kwCzR0hTQS14anJmLTh4NGYtNDNoNM3gvQ

maven org.springframework:spring-web
Moderate
over 4 years ago

Allocation of Resources Without Limits or Throttling in Spring Framework GSA_kwCzR0hTQS01NTh4LTJ4amctNjIzMs038w

maven org.springframework:spring-expression
Potential
Moderate
over 6 years ago

CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdwbTQtZzJxai1qODV4

maven org.springframework:spring-webflux, org.springframework:spring-webmvc
Potential
Moderate
almost 8 years ago

Pivotal Spring Framework DoS Attack with XML Input MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ2N3ctNTM1ai1ycTVt

maven org.springframework:spring-web
Potential
Moderate
almost 8 years ago

Moderate severity vulnerability that affects org.springframework:spring-core MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ1dmctMnY3My12bTYy

maven org.springframework:spring-core
Potential
Moderate
almost 8 years ago

Path Traversal in org.springframework:spring-core MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4aHctNzk0Yy00ajln

maven org.springframework:spring-core
Potential
Moderate
almost 8 years ago

Denial of Service in org.springframework:spring-core MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJjcGYtdmo1My03aDJt

maven org.springframework:spring-core
Potential
Moderate
almost 8 years ago

Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1OTYtZndocS04eDQ4

maven org.springframework.security:spring-security-core, org.springframework:spring-core
Potential
Moderate
almost 8 years ago

Moderate severity vulnerability that affects org.springframework:spring-core MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYyNngtcHI5Ni12dzg2

maven org.springframework:spring-core
Potential
Moderate
almost 8 years ago

Spring Framework Cross Site Tracing (XST) MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlnY20tZjR4My04anB3

maven org.springframework:spring-web

Filter by Severity

Moderate 27 High 21 Critical 5 Low 2