Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 422
GHSA-659m-px2c-25wj
Spring Framework Denial of Service via AntPathMatcher
GHSA-q723-847q-5g8g
Spring Framework Predictable Session ID in WebSocket Module
GHSA-4hfh-6x8g-gwpp
Spring Framework Escalation via Session Fixation in WebFlux
GHSA-h3qp-gqrc-q736
Spring Framework Open Redirect in Spring MVC and WebFlux
GHSA-x23c-287f-qqv5
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
GHSA-83f7-v6px-pp3h
Spring Framework Denial of Service via Multipart Requests in WebFlux
GHSA-72pg-x5f8-j25j
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
GHSA-mq64-j8f9-9gcj
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
GHSA-3chg-m5w7-qfv5
Spring Framework Cross-site Scripting via JavaScriptUtils
CVE-2026-41855
In an untrusted JMS environment, org.springframework.jms.support.conve ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-659m-px2c-25wj Spring Framework Denial of Service via AntPathMatcher | CVSS3: 3.7 | 0% Низкий | 3 месяца назад | |
GHSA-q723-847q-5g8g Spring Framework Predictable Session ID in WebSocket Module | CVSS3: 4.8 | 0% Низкий | 3 месяца назад | |
GHSA-4hfh-6x8g-gwpp Spring Framework Escalation via Session Fixation in WebFlux | CVSS3: 4.2 | 0% Низкий | 3 месяца назад | |
GHSA-h3qp-gqrc-q736 Spring Framework Open Redirect in Spring MVC and WebFlux | CVSS3: 4.2 | 0% Низкий | 3 месяца назад | |
GHSA-x23c-287f-qqv5 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux | CVSS3: 7.5 | 0% Низкий | 3 месяца назад | |
GHSA-83f7-v6px-pp3h Spring Framework Denial of Service via Multipart Requests in WebFlux | CVSS3: 5.9 | 0% Низкий | 3 месяца назад | |
GHSA-72pg-x5f8-j25j Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux | CVSS3: 5.9 | 0% Низкий | 3 месяца назад | |
GHSA-mq64-j8f9-9gcj Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux | CVSS3: 5.9 | 0% Низкий | 3 месяца назад | |
GHSA-3chg-m5w7-qfv5 Spring Framework Cross-site Scripting via JavaScriptUtils | CVSS3: 7.1 | 0% Низкий | 3 месяца назад | |
CVE-2026-41855 In an untrusted JMS environment, org.springframework.jms.support.conve ... | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу