org.springframework:spring-webflux
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Maven
- Vulnerability status
- affected by 13 advisory(ies)
Advisories (20)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-36p3-wjmg-h94x Remote Code Execution in Spring Framework | < 5.2.20.RELEASE ; 5.3.0 – < 5.3.18 | Affected |
| GHSA-4773-3jfm-qmx3 Spring Framework Improper Path Limitation with Script View Templates | 7.0.0-M1 – < 7.0.6 ; 6.2.0 – < 6.2.17 ; 6.0.0 – 6.1.21 ; … | Not affected |
| GHSA-4hfh-6x8g-gwpp Spring Framework Escalation via Session Fixation in WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-5843-p793-ghmm Spring Framework DoS with Multipart Temp Files in WebFlux | 7.0.0 – < 7.0.7 ; 6.2.0 – < 6.2.18 ; 6.1.0 – 6.1.26 ; … | Affected |
| GHSA-6hcq-hmm3-jj3c Spring MVC and WebFlux has Server Sent Event stream corruption | 7.0.0-M1 – < 7.0.6 ; 6.2.0 – < 6.2.17 ; 6.0.0 – 6.1.21 ; … | Not affected |
| GHSA-6p4f-wcwh-5vvm Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources | 7.0.0 – < 7.0.7 ; 6.2.0 – < 6.2.18 ; 6.1.0 – 6.1.26 ; … | Affected |
| GHSA-72pg-x5f8-j25j Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-7pm4-g2qj-j85x CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux | 5.2.0 – < 5.2.3 | Not affected |
| GHSA-83f7-v6px-pp3h Spring Framework Denial of Service via Multipart Requests in WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-8wx2-9q48-vm9r RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application | 5.2.0.RELEASE – < 5.2.3.RELEASE ; 5.1.0.RELEASE – < 5.1.13.RELEASE ; 5.0.0.RELEASE – < 5.0.16.RELEASE | Not affected |
| GHSA-9qf2-26p9-2q2q Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints | 5.2.5.RELEASE – 5.2.25.RELEASE ; 5.3.0 – 5.3.49 ; 6.0.0 – 6.0.30 ; … | Not affected |
| GHSA-cjpg-rgq5-fr37 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-cx7f-g6mp-7hqm Path traversal vulnerability in functional web frameworks | 6.1.0 – < 6.1.13 ; 6.0.0 – 6.0.23 ; 5.3.0 – 5.3.39 | Not affected |
| GHSA-g5vr-rgqm-vf78 Spring Framework Path Traversal vulnerability | 6.1.0 – < 6.1.14 ; ≤ 5.3.40 ; 6.0.0 – 6.0.24 | Affected |
| GHSA-h3qp-gqrc-q736 Spring Framework Open Redirect in Spring MVC and WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-j9f9-w8pj-32f8 Spring Framework Server Sent Event stream corruption while rendering fragments | 6.2.0 – 6.2.19 ; 7.0.0 – < 7.0.9 | Not affected |
| GHSA-mq64-j8f9-9gcj Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
| GHSA-vqgp-pf68-6947 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL | ≤ 5.3.39 | Affected |
| GHSA-wg35-8jpf-2xv3 Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. | 7.0.0 – < 7.0.7 ; 6.2.0 – < 6.2.18 ; 6.1.0 – 6.1.26 ; … | Affected |
| GHSA-x23c-287f-qqv5 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux | 7.0.0 – < 7.0.8 ; 6.2.0 – < 6.2.19 ; 6.1.0 – 6.1.21 ; … | Affected |
Sources
| Source | Licence |
|---|