Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.

Improper Output Neutralization for Logs in Spring Framework

Improper Privilege Management in Spring Framework

Pivotal Spring Framework contains unsafe Java deserialization methods

Improper Control of Generation of Code ('Code Injection') in Spring Framework

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Improper Neutralization of Input During Web Page Generation in Spring Framework

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Improper Restriction of XML External Entity Reference in Spring Framework