CVE security advisories and vulnerability history for spring-framework by spring-projects.
31
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
2
Public exploits
With known exploit
6.4
Avg CVSS
2016–2024
Last updated
Overview
spring-projects spring-framework has 31 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting spring-projects spring-framework, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of spring-projects spring-framework's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical1
High5
Medium4
Low2
19 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of spring-projects spring-framework's CVEs is confirmed exploited in the wild.
Public exploits
2
2 of spring-projects spring-framework's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every spring-projects spring-framework version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about spring-projects spring-framework vulnerabilities.
How many CVEs does spring-projects spring-framework have?
spring-projects spring-framework has 31 published CVE records since 2016.
How many spring-projects spring-framework CVEs are in CISA KEV?
Yes — 1 of spring-projects spring-framework's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for spring-projects spring-framework vulnerabilities?
Yes — 2 of spring-projects spring-framework's CVEs have a known public exploit.
Which versions of spring-projects spring-framework are affected?
250 distinct spring-projects spring-framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in spring-projects spring-framework CVEs?
spring-projects spring-framework's CVEs most often map to these CWE weakness types: CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-400 (Uncontrolled Resource Consumption), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-269 (Improper Privilege Management).
How many critical spring-projects spring-framework vulnerabilities are there?
spring-projects spring-framework has 1 critical and 5 high-severity CVEs.
What is the average severity of spring-projects spring-framework CVEs?
The average CVSS base score across spring-projects spring-framework's scored CVEs is 6.4.
