cve-2017-4971

CVE-2017-4971 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-4971 Image author: https://github.com/Medicean/VulApps/tree/master/s/springwebflow/1...

ROOT-APP-MAVEN-CVE-2024-22243 CVE-2024-22243 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22243 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2016-1000027 CVE-2016-1000027 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2016-1000027 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22262 CVE-2024-22262 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22262 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22259 CVE-2024-22259 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22259 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38820 CVE-2024-38820 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38820 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22745 CVE-2026-22745 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22745 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38809 CVE-2024-38809 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38809 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

spring-web-without-remoting

spring-web-without-remoting Spring Web 5.x with org.springframework.remoting package removed, to fix CVE-2016-1000027. For more info, see spring-projects/spring-framework 24434...

cve-2022-22965

Minimal CVE-2022-22965 example At the time of writing, spring-web request params binding WebDataBinder, by default allows accessing object's getClass method. This is an internal jvm specific implementation detail imho shouldn't be exposed. As such, its features may change and be expanded with...

Spring-Web-5xx-Mitigated-version

Spring-Web-5xx-Mitigated-version Overview This mitigated version of Spring Web 5.x.x is specifically crafted to address critical vulnerabilities detected by multiple vendors using Sonatype and Mend. The vulnerabilities, identified under the CVE-2016-1000027 advisory, pose a risk of remote code...

ROOT-APP-MAVEN-CVE-2025-41234 CVE-2025-41234 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2025-41234 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, jackson-databind, Angular, bootstrap, React Router, decode-uri-component, Reactor Netty, Spring WebFlux, Spring Framework,spring-web. Vulnerabilities include allowing the renamed JSON key to be assigned...

This Week in Spring - September 29th, 2026

Hi, Spring fans! Welcome to another rip-roarin' and exciting installment of This Week in Spring! We've got a ton of cool stuff to look at this week, so let's dive right into it! an important update on Spring's release practice Speaking of which, we had a slew of releases on the 24th, including...

Security Bulletin: spring-web-6.2.18.jar (Publicly disclosed vulnerability found by Scanner)

Summary Multiple Spring Framework spring-web vulnerabilities affecting 6.2.0–6.2.18: session fixation via compromised subdomain CVE-2026-41839, WebFlux multipart DoS CVE-2026-41840, XSS via incorrect JavaScriptUtils.javaScriptEscape escaping CVE-2026-41845, multipart request smuggling in Spring...

Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)

Summary IBM DB2 Developer extension is affected via vulnerability in spring-webCVE-2026-22740 Vulnerability Details CVEID:CVE-2026-22740 DESCRIPTION: A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files...

Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22741)

Summary IBM DB2 Developer extension is affected via vulnerability in spring-webCVE-2026-22741 Vulnerability Details CVEID:CVE-2026-22741 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be...

io.quarkus:quarkus-spring-web-deployment (>=3.27.0, <=3.27.5.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.27.0, <=3.27.5.1)

io.quarkus:quarkus-spring-web MAVEN version =3.27.0, =3.27.0, =3.27.5.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...

io.quarkus:quarkus-spring-web-deployment (>=3.33.0, <=3.33.3.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.33.0, <=3.33.3.1)

io.quarkus:quarkus-spring-web MAVEN version =3.33.0, =3.33.0, =3.33.3.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...

io.quarkus:quarkus-spring-web-deployment (>=3.34.0, <=3.39.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.34.0, <=3.39.1)

io.quarkus:quarkus-spring-web MAVEN version =3.34.0, =3.34.0, =3.39.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...