ROOT-APP-MAVEN-CVE-2023-20860 CVE-2023-20860 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2023-20860 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38828 CVE-2024-38828 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38828 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-47884 CVE-2026-47884 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-47884 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22737 CVE-2026-22737 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22737 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-41242 CVE-2025-41242 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2025-41242 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

spring-webmvc5

spring-webmvc5 Fork of spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Add the following to the dependencies section of your project's pom.xml: io.github.jaloon spring-webmvc5 5.3.39.1...

ROOT-APP-MAVEN-AIKIDO-2024-10351 AIKIDO-2024-10351 in org.springframework:spring-webmvc - Patched by Root

Root has patched AIKIDO-2024-10351 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2014-0225 CVE-2014-0225 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2014-0225 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2016-5007 CVE-2016-5007 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2016-5007 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc (CVE-2026-47884, CVE-2026-47887, CVE-2026-47890, CVE-2026-59313)

Summary IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc. Spring-webmvc is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Detai...

ROOT-APP-MAVEN-CVE-2026-47890 CVE-2026-47890 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-47890 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

DoS (Denial of Service) org.springframework:spring-webmvc Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 7.16.0, 7.17.0, 7.18.0, 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS...

PT-2026-121498

Root has patched AIKIDO-2024-10351 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

RHLW-2026-67AFC831A93FF9CC Lightwell Security Advisory: spring-webmvc 5.3.18.rhlw-00010

Red Hat Lightwell has released org.springframework:spring-webmvc 5.3.18.rhlw-00010 with backported fixes for CVE-2023-20860, CVE-2024-38816, CVE-2024-38819, CVE-2024-38828, CVE-2025-41242, CVE-2026-22735, CVE-2026-22737, CVE-2026-22741, and CVE-2026-22745. CVE-2023-20860: Spring Framework running...

Spring WebMVC 5.3.17 Data Binding Remote Code Execution

Spring WebMVC version 5.3.17 on JDK 9+ and Tomcat is vulnerable to data binding remote code execution. The proof of concept rewrites Tomcat access logging to create a JSP command shell. https://packetstorm.news/download/234972...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell CVE-2022-22965 Vulhub's...

ROOT-APP-MAVEN-CVE-2026-22735 CVE-2026-22735 in org.springframework:spring-webflux - Patched by Root

Root has patched CVE-2026-22735 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...

Security Bulletin: DEV-EXT - spring-webmvc-6.2.19.jar (Publicly disclosed vulnerability found by Scanner)

Summary IBM Db2 Developer Extension is affected by 3 Spring MVC CVEs in spring-webmvc-6.2.19.jar: CVE-2026-47884 — CVSS 9.8 , CVE-2026-47887 — CVSS 6.1 , CVE-2026-47890 — CVSS 9.8 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSR...

ai.astraform:remote-domain-conformance-java (0.2.0), ai.astraform:remote-domain-template-java-spring (0.2.0) +4021 more potentially affected by CVE-2026-59313 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.8)

org.springframework:spring-webmvc MAVEN version =7.0.0, =0.1.0, =0.0.1, =0.0.1, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-59313 Source advisory: MEND:CVE-2026-59313...