Package · Maven

org.springframework:spring-messaging

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2022-22971 Public exploit

Allocation of Resources Without Limits or Throttling in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

libspring-java libspring-java jenkins org.springframework:spring-messaging Debian Ubuntu Alpine Maven

May 12, 2022