Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.

In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

Improper Output Neutralization for Logs in Spring Framework

Improper Privilege Management in Spring Framework

Pivotal Spring Framework contains unsafe Java deserialization methods

Improper Control of Generation of Code ('Code Injection') in Spring Framework

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

Improper Neutralization of Input During Web Page Generation in Spring Framework

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Cross-Site Request Forgery in Spring Framework