VulertSecurity VulertSecurity

Vulnerability Database · Debian · libspring-java · Version

libspring-java 4.3.30-2

4.3.30-2 is affected by 76 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 3 High 7 Medium 24 Low 4 Unrated 38

All libspring-java versions & vulnerabilities → Search the database for this package →
Database updated 22/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

libspring-java 4.3.30-2 vulnerabilities

76 vulnerabilities cover libspring-java 4.3.30-2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Stream Corruption Vulnerability in libspring-java Affects Multiple Debian Releases 9.8 critical No fix published 27 Aug 2026
Remote Code Execution Vulnerability in libspring-java 9.8 critical No fix published 01 Apr 2022
Spring Framework Safety Guard Bypass Vulnerability in libspring-java 9.1 critical No fix published 27 Aug 2026
Critical Vulnerability in libspring-java: CVE-2026-41855 Exposes Sensitive Data 8.1 high No fix published 09 Jun 2026
Denial of Service Vulnerability in libspring-java: Spring Framework Data Binding 7.5 high No fix published 27 Aug 2026
Critical Vulnerability in libspring-java: CVE-2026-41849 7.5 high No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41850 Exposes Applications to Potential Attacks 7.5 high No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41842 7.5 high No fix published 09 Jun 2026
Security Bypass Vulnerability in Spring Framework 7.5 high No fix published 27 Mar 2023
Critical Vulnerability in libspring-java: CVE-2026-41845 Exposes Sensitive Data 7.1 high No fix published 09 Jun 2026
Disk Space Consumption Vulnerability in libspring-java Package 6.5 medium No fix published 29 Apr 2026
Denial-of-Service Vulnerability in libspring-java 6.5 medium No fix published 13 Apr 2023
Denial-of-Service Vulnerability in libspring-java 6.5 medium No fix published 23 Mar 2023
Denial of Service Vulnerability in libspring-java 6.5 medium No fix published 12 May 2022
Denial of Service Vulnerability in libspring-java 6.5 medium No fix published 01 Apr 2022
Arbitrary HTML/JavaScript Code Injection in libspring-java - CVE-2026-59281 6.1 medium No fix published 27 Aug 2026
Critical Vulnerability in libspring-java: CVE-2026-41841 Exposes Sensitive Data 5.9 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41846 5.9 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41843 5.9 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41840 5.9 medium No fix published 09 Jun 2026
Spring Framework Vulnerability: Content Disclosure in Template Views 5.9 medium No fix published 20 Mar 2026
Critical Vulnerability in libspring-java: CVE-2026-41853 Exposes Systems to Potential Attacks 5.3 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41851 5.3 medium No fix published 09 Jun 2026
Case Insensitivity Issue in libspring-java - CVE-2024-38820 5.3 medium No fix published 18 Oct 2024
DoS Vulnerability in libspring-java 5.3 medium No fix published 12 May 2022
Case-sensitive Disallowed Fields in Spring Framework 5.3 medium No fix published 14 Apr 2022
Critical Vulnerability in libspring-java: CVE-2026-41847 Exposes Sensitive Data 4.8 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41838 Exposes Sensitive Data 4.8 medium No fix published 09 Jun 2026
Path Traversal Vulnerability in libspring-java: Spring Framework FreeMarker Integration 4.3 medium No fix published 27 Aug 2026
Unauthorized Message Sending Vulnerability in libspring-java Package 4.3 medium No fix published 16 Oct 2025
CVE-2021-22060: Log Injection Vulnerability in libspring-java 4.3 medium No fix published 10 Jan 2022
CVE-2021-22096: Log Injection Vulnerability in libspring-java 4.3 medium No fix published 28 Oct 2021
Critical Vulnerability in libspring-java: CVE-2026-41844 4.2 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41839 4.2 medium No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41852 Exposes Systems to Potential Attacks 3.7 low No fix published 09 Jun 2026
Critical Vulnerability in libspring-java: CVE-2026-41848 3.7 low No fix published 09 Jun 2026
Cache Poisoning Vulnerability in libspring-java: A Threat to Spring MVC and WebFlux Applications 3.1 low No fix published 29 Apr 2026
Stream Corruption Vulnerability in libspring-java Package 2.6 low No fix published 20 Mar 2026
HTTP Response Splitting Vulnerability in libspring-java Package N/A unrated No fix published 27 Aug 2026
Spring Framework Annotation Detection Vulnerability in libspring-java N/A unrated No fix published 16 Sep 2025
Spring Framework Annotation Detection Vulnerability in libspring-java Package N/A unrated No fix published 16 Sep 2025
Path Traversal Vulnerability in libspring-java Package N/A unrated No fix published 18 Aug 2025
Path Traversal Vulnerability in libspring-java Package N/A unrated No fix published 18 Aug 2025
Spring Framework Vulnerability CVE-2025-22233: Bypass of Disallowed Fields Checks N/A unrated No fix published 16 May 2025
Locale-Independent Lowercase Conversion Vulnerability in libspring-java Package N/A unrated No fix published 16 May 2025
Path Traversal Vulnerability in libspring-java: Risk of Unauthorized File Access N/A unrated No fix published 19 Dec 2024
Path Traversal Vulnerability in libspring-java Package N/A unrated No fix published 19 Dec 2024
Data Exposure Vulnerability in Spring LDAP: Versions 2.4.0 to 3.2.7 N/A unrated No fix published 04 Dec 2024
Data Exposure Vulnerability in libspring-java: Spring LDAP Case Sensitivity Issue N/A unrated No fix published 04 Dec 2024
Denial of Service Vulnerability in libspring-java: Spring MVC @RequestBody Parameter N/A unrated No fix published 18 Nov 2024
Denial of Service Vulnerability in libspring-java: Spring MVC @RequestBody byte[] Parameter N/A unrated No fix published 18 Nov 2024
Case Insensitivity Issue in libspring-java: CVE-2024-38820 N/A unrated No fix published 18 Oct 2024
Denial of Service Vulnerability in libspring-java: ETag Header Parsing Flaw N/A unrated No fix published 27 Sep 2024
DoS Vulnerability in libspring-java: ETag Header Parsing Issue N/A unrated No fix published 27 Sep 2024
Path Traversal Vulnerability in libspring-java N/A unrated No fix published 13 Sep 2024
Path Traversal Vulnerability in libspring-java: Risk of Unauthorized File Access N/A unrated No fix published 13 Sep 2024
Signature Forgery Vulnerability in libspring-java N/A unrated No fix published 23 Aug 2024
Signature Forgery Vulnerability in libspring-java Package N/A unrated No fix published 23 Aug 2024
Denial of Service Vulnerability in libspring-java Package N/A unrated No fix published 20 Aug 2024
Denial of Service Vulnerability in libspring-java N/A unrated No fix published 20 Aug 2024
Open Redirect and SSRF Vulnerability in libspring-java N/A unrated No fix published 16 Apr 2024
Open Redirect and SSRF Vulnerability in libspring-java: CVE-2024-22262 N/A unrated No fix published 16 Apr 2024
Open Redirect and SSRF Vulnerability in libspring-java Package N/A unrated No fix published 16 Mar 2024
Open Redirect and SSRF Vulnerability in libspring-java N/A unrated No fix published 16 Mar 2024
Open Redirect and SSRF Vulnerability in libspring-java N/A unrated No fix published 23 Feb 2024
Open Redirect and SSRF Vulnerability in libspring-java: CVE-2024-22243 N/A unrated No fix published 23 Feb 2024
Denial-of-Service Vulnerability in libspring-java Package N/A unrated No fix published 13 Apr 2023
Security Bypass Vulnerability in libspring-java Package N/A unrated No fix published 27 Mar 2023
Denial-of-Service Vulnerability in libspring-java Package N/A unrated No fix published 23 Mar 2023
DoS Vulnerability in libspring-java Package: Risk of File Upload Handling N/A unrated No fix published 12 May 2022
Denial of Service Vulnerability in libspring-java Package N/A unrated No fix published 12 May 2022
Case Sensitivity Vulnerability in libspring-java Package N/A unrated No fix published 14 Apr 2022
Denial of Service Vulnerability in libspring-java Package N/A unrated No fix published 01 Apr 2022
Remote Code Execution Vulnerability in libspring-java Package N/A unrated No fix published 01 Apr 2022
Spring Framework Log Injection Vulnerability in libspring-java Package N/A unrated No fix published 10 Jan 2022
Log Injection Vulnerability in libspring-java Package N/A unrated No fix published 28 Oct 2021

Looking for another version, or everything Vulert holds for libspring-java?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About libspring-java 4.3.30-2

Is libspring-java 4.3.30-2 vulnerable?

Yes. 76 vulnerabilities in the Vulert database cover libspring-java 4.3.30-2: 3 critical, 7 high, 24 medium and 4 low, plus 38 not yet rated. Each entry above names the fixed version to move to.

How do I monitor libspring-java for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libspring-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.