Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-core

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-41249 Public exploit

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium —
    CVE-2011-2894 Public exploit

    Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

    Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untru…

    org.springframework.security:spring-security-core org.springframework:spring-core Maven