ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.6.0) +1586 more potentially affected by CVE-2026-22735 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.5)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-22735 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-15701756...

Linux Distros Unpatched Vulnerability : CVE-2018-15756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide suppor...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6497 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-41242 Source advisory: GHSA-R936-GWX5-V52F...

ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0), ai.fusionbrain:fusionbrain-spring-boot-starter (1.0.0) +5180 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.9)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.17.0, =0.1.1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2025-41242 Source advisory: GHSA-R936-GWX5-V52F...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +3773 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.0.0, <=6.0.23)

org.springframework:spring-webmvc MAVEN version =6.0.0, =0.0.22, =0.0.28, =0.0.11, =0.1.0, =4.0.0, =1.5.0.release, =1.5.1.release, =1.5.0.release, =2.1.0.release, =3.0.0, =5.0.0, =5.0.0, =5.0.1 - be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-application 2.12.0 -...

ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0), ai.fusionbrain:fusionbrain-spring-boot-starter (1.0.0) +5180 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.9)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.17.0, =0.1.1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2025-41242 Source advisory: OSV:GHSA-R936-GWX5-V52F...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11872 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=5.3.0, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =1.6.6.1 - ai.platon:distributed-lock-example 1.4.2 and more Source cves: CVE-2025-41242 Source advisory: GHSA-R936-GWX5-V52F...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6497 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-41242 Source advisory: OSV:GHSA-R936-GWX5-V52F...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11872 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=5.3.0, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =1.6.6.1 - ai.platon:distributed-lock-example 1.4.2 and more Source cves: CVE-2025-41242 Source advisory: OSV:GHSA-R936-GWX5-V52F...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +3773 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.0.0, <=6.0.23)

org.springframework:spring-webmvc MAVEN version =6.0.0, =0.0.22, =0.0.28, =0.0.11, =0.1.0, =4.0.0, =1.5.0.release, =1.5.1.release, =1.5.0.release, =2.1.0.release, =3.0.0, =5.0.0, =5.0.0, =5.0.1 - be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-application 2.12.0 -...

ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0), ai.fusionbrain:fusionbrain-spring-boot-starter (1.0.0) +5180 more potentially affected by CVE-2025-41242 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.9)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.17.0, =0.1.1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2025-41242 Source advisory: MEND:CVE-2025-41242...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-webmvc-5.3.27.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of spring-webmvc-5.3.27.jar Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontrolled Resource...

Path traversal vulnerability in functional web frameworks (CVE-2024-38819)

Spring Framework is vulnerable to a path traversal issue due to a lack of sufficient sanitization of path sequences processed by the WebMvc.fn or WebFlux.fn functional web frameworks. A remote attacker could submit crafted HTTP requests to an application that serves static resources through the...

Path Traversal (Arbitrary Read/Write) org.springframework:spring-webmvc Dependency in Jira Software Data Center and Server

This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 9.12.0 Jira Software Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

Security Bulletin: Vulnerability in Spring WebMvc affects watsonx.data

Summary Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-38819 DESCRIPTION: Applications serving static resources through the functiona...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to spring-webmvc-6.1.12.jar CVE-2024-38816

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to spring-webmvc-6.1.12.jar CVE-2024-38816. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-38816 DESCRIPTION: VMware Tanzu Spring Security could allow a remote...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to spring-webmvc-6.1.12 (CVE-2024-38816)

Summary IBM Sterling Connect:Direct Web Services uses spring webmvc jar, Spring Security could allow a remote attacker to obtain sensitive information, caused by a path traversal attack in applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux...

IDOR (Insecure Direct Object Reference) org.springframework:spring-webmvc Dependency in Confluence Data Center and Server

This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in version 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

Spring Framework Path Traversal vulnerability

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

am.ik.woothee:woothee-spring (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.9) +94 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (4.1.3.release)

org.springframework:spring-webmvc MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.woothee:woothee-spring 1.0.0 - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.9 ...