spring-projects/spring-framework
Defined in 29 files
Last patched
getValueInternal in spring-projects/spring-framework was changed by 4 published CVE fixes between 2023 and 2026, in 43 distinct patches that added or removed 72 lines in total.
The name occurs in 29 files: spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorMatches.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpDec.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/TypeReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/MethodReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpInc.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/Assign.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/PropertyOrFieldReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/FunctionReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/BeanReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpNE.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpModulus.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpPlus.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpDivide.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpAnd.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/Ternary.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpMultiply.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorNot.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpLT.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpGT.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/Elvis.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/ConstructorReference.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorPower.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpEQ.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorInstanceof.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpGE.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpLE.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorBetween.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpMinus.java, spring-expression/src/main/java/org/springframework/expression/spel/ast/OpOr.java.
spring-projects/spring-framework has 54 CVEs with a located fix in total, so 7% of them touched this function.
Every published CVE whose fix changed getValueInternal, newest first, with the lines each fix touched.
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/Assign.java · line 47 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/BeanReference.java · line 68 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/ConstructorReference.java · line 112 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/Elvis.java · line 63 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/FunctionReference.java · lines 87–99 · +2 −0 in 2 hunks
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/MethodReference.java · lines 125–159 · +4 −3 in 2 hunks
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpAnd.java · line 50 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpDec.java · line 71 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpDivide.java · line 54 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpEQ.java · line 46 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorBetween.java · line 71 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorInstanceof.java · line 65 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorMatches.java · line 128 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorNot.java · line 51 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorPower.java · line 51 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpGE.java · line 49 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpGT.java · line 49 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpInc.java · line 69 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpLE.java · line 49 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpLT.java · line 49 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpMinus.java · line 82 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpModulus.java · line 52 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpMultiply.java · line 85 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpNE.java · line 47 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpOr.java · line 49 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpPlus.java · line 76 · +1 −0
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/PropertyOrFieldReference.java · lines 109–133 · +9 −7 in 2 hunks
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/Ternary.java · lines 54–60 · +4 −3
CVE-2026-41851 · spring-expression/src/main/java/org/springframework/expression/spel/ast/TypeReference.java · line 61 · +1 −0
CVE-2024-38827 · spring-expression/src/main/java/org/springframework/expression/spel/ast/TypeReference.java · line 62 · +1 −1
CVE-2024-38808 · spring-expression/src/main/java/org/springframework/expression/spel/ast/Assign.java · lines 44–46 · +3 −0
CVE-2024-38808 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpDec.java · lines 54–57 · +4 −0
CVE-2024-38808 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OpInc.java · lines 54–57 · +4 −0
CVE-2023-20861 · spring-expression/src/main/java/org/springframework/expression/spel/ast/OperatorMatches.java · line 82 · +1 −1
Get an alert when the next CVE fix lands in spring-projects/spring-framework, with the patched functions.
Monitor spring-framework CVEsFunctions in the same files that CVE fixes also changed.
Functions in spring-projects/spring-framework changed by the most CVE fixes.
Common questions about CVE fixes to getValueInternal.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
