Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-web

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2016-1000027 Public exploit EPSS 33%

    Pivotal Spring Framework contains unsafe Java deserialization methods

    Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authenticatio…

    libspring-java org.springframework:spring-web Debian Maven