Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.springframework.hateoas:spring-hateoas

3 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 high, 1 medium
Dependents
9
Registry
Maven Central

Advisories 3

  • Spring HATEOAS heap exhaustion through unbounded internal caching

    Affected: from 3.0.0, fixed in 3.0.4; from 2.5.0, fixed in 2.5.3; from 2.3.0, through 2.3.4; through 1.5.6; from 2.4.0, through 2.4.1.

  • Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration

    Affected: from 3.0.0, fixed in 3.0.4; from 2.5.0, fixed in 2.5.3; from 2.3.0, through 2.3.4; through 1.5.6; from 2.4.0, through 2.4.1.

  • CVE-2023-34036Medium 5.3

    Forwarded header exploit with Spring HATEOAS on WebFlux

    Affected: fixed in 1.5.5; from 2.0.0, fixed in 2.0.5; from 2.1.0, fixed in 2.1.1.