org.springframework:spring-web vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-41234Mediumorg.springframework:spring-web: Spring Framework vulnerable to a reflected file download (RFD)CVE-2024-38820Mediumorg.springframework:spring-context: Spring Framework DataBinder Case Sensitive Match Exception CVE-2024-38809Mediumorg.springframework:spring-web: Spring Framework DoS via conditional HTTP request CVE-2024-22262Highorg.springframework:spring-web: Spring Framework URL Parsing with Host Validation CVE-2024-22259Highorg.springframework:spring-web: Spring Framework URL Parsing with Host Validation Vulnerability CVE-2024-22243Highorg.springframework:spring-web: Spring Web vulnerable to Open Redirect or Server Side Request Forgery CVE-2021-22118Highorg.springframework:spring-web: Improper Privilege Management in Spring Framework CVE-2016-1000027Criticalorg.springframework:spring-web: Pivotal Spring Framework contains unsafe Java deserialization methods CVE-2013-6429Mediumorg.springframework:spring-web: Cross-Site Request Forgery in Spring Framework CVE-2013-6430Mediumorg.springframework:spring-web: Improper Neutralization of Input During Web Page Generation in Spring Framework CVE-2015-3192Mediumorg.springframework:spring-web: Pivotal Spring Framework DoS Attack with XML Input CVE-2018-11039Mediumorg.springframework:spring-web: Spring Framework Cross Site Tracing (XST)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo