VulertSecurity VulertSecurity

Vulnerability Database · Ubuntu · libspring-java · Version

libspring-java 3.0.6.RELEASE-10

3.0.6.RELEASE-10 is affected by 47 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 4 High 16 Medium 21 Low 3 Unrated 3

All libspring-java versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

libspring-java 3.0.6.RELEASE-10 vulnerabilities

47 vulnerabilities cover libspring-java 3.0.6.RELEASE-10. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Authorization Bypass Vulnerability in libspring-java Package 9.8 critical No fix published 31 Oct 2022
Authorization Bypass Vulnerability in libspring-java Package 9.8 critical No fix published 19 May 2022
Critical Remote Code Execution Vulnerability in libspring-java Package 9.8 critical No fix published 02 Jan 2020
Critical Reflected File Download Vulnerability in libspring-java Package 9.6 critical 3.0.6.RELEASE-13ubuntu0.1~esm2 25 May 2017
Critical XXE Vulnerability in libspring-java Package: CVE-2014-0225 8.8 high 3.0.6.RELEASE-13ubuntu0.1~esm1 25 May 2017
Critical Vulnerability in libspring-java: Bypass of RFD Protections 8.7 high No fix published 19 Sep 2020
Open Redirect and SSRF Vulnerability in libspring-java Package 8.1 high No fix published 16 Apr 2024
Open Redirect and SSRF Vulnerability in libspring-java Package 8.1 high No fix published 16 Mar 2024
Open Redirect and SSRF Vulnerability in libspring-java Package 8.1 high No fix published 23 Feb 2024
Privilege Escalation Vulnerability in libspring-java Package 8.1 high No fix published 31 Oct 2022
Reflected File Download Vulnerability in libspring-java Package 8.0 high No fix published 17 Jan 2020
Spring Framework Vulnerability in libspring-java: Annotation Detection Flaw 7.5 high No fix published 16 Sep 2025
Path Traversal Vulnerability in libspring-java Package: CVE-2024-38819 7.5 high No fix published 19 Dec 2024
Path Traversal Vulnerability in libspring-java Package: CVE-2024-38816 7.5 high No fix published 13 Sep 2024
Security Bypass Vulnerability in libspring-java Package: CVE-2023-20860 7.5 high No fix published 27 Mar 2023
Denial of Service Vulnerability in Spring Framework - libspring-java Package 7.5 high No fix published 18 Oct 2018
Cross-Domain Request Vulnerability in libspring-java Package - CVE-2018-11040 7.5 high No fix published 25 Jun 2018
Spring Framework Vulnerability: CVE-2016-5007 in libspring-java Packages 7.5 high No fix published 25 May 2017
Directory Traversal Vulnerability in libspring-java Package: CVE-2016-9878 7.5 high 3.0.6.RELEASE-13ubuntu0.1~esm1 29 Dec 2016
Critical Vulnerability in libspring-java: EndpointRequest.to() Null Path Exposure 7.3 high No fix published 28 Apr 2025
Reflected File Download Vulnerability in libspring-java Package 6.5 medium No fix published 12 Jun 2025
Denial-of-Service Vulnerability in libspring-java Package: CVE-2023-20863 6.5 medium No fix published 13 Apr 2023
Denial-of-Service Vulnerability in libspring-java Package 6.5 medium No fix published 23 Mar 2023
Denial of Service Vulnerability in libspring-java Package 6.5 medium No fix published 12 May 2022
Denial of Service Vulnerability in libspring-java Package 6.5 medium No fix published 01 Apr 2022
Denial of Service Vulnerability in Spring Framework - libspring-java Package 6.5 medium No fix published 11 May 2018
Signature Forgery Vulnerability in libspring-java Package 6.3 medium No fix published 23 Aug 2024
Path Traversal Vulnerability in libspring-java Package 5.9 medium No fix published 18 Aug 2025
Cross Site Tracing Vulnerability in libspring-java Package 5.9 medium No fix published 25 Jun 2018
Denial of Service Vulnerability in libspring-java: CVE-2015-3192 5.5 medium 3.0.6.RELEASE-13ubuntu0.1~esm2 12 Jul 2016
Denial of Service Vulnerability in libspring-java Package: CVE-2024-38828 5.3 medium No fix published 18 Nov 2024
Denial of Service Vulnerability in libspring-java Package: CVE-2024-38809 5.3 medium No fix published 27 Sep 2024
Denial-of-Service Vulnerability in libspring-java Package: CVE-2023-34053 5.3 medium No fix published 28 Nov 2023
Integer Overflow Vulnerability in libspring-java Package: CVE-2022-22976 5.3 medium No fix published 19 May 2022
Denial of Service Vulnerability in libspring-java Package: CVE-2022-22970 5.3 medium No fix published 12 May 2022
Spring Framework Vulnerability in libspring-java: Case Sensitivity in Disallowed Fields 5.3 medium No fix published 14 Apr 2022
CSRF Vulnerability in Spring Framework - libspring-java Package 5.3 medium No fix published 17 Jan 2020
Spring Framework Vulnerability: Bypass of Security Constraints in libspring-java 5.3 medium No fix published 16 Mar 2018
Denial of Service Vulnerability in libspring-java Package: CVE-2024-38808 4.3 medium No fix published 20 Aug 2024
Critical Log Injection Vulnerability in libspring-java Package 4.3 medium No fix published 10 Jan 2022
Spring Framework Log Injection Vulnerability in libspring-java Package 4.3 medium No fix published 28 Oct 2021
Data Exposure Vulnerability in Spring LDAP - CVE-2024-38829 3.7 low No fix published 04 Dec 2024
Critical Vulnerability in libspring-java Package: Locale-Independent Lowercase Conversion Bypass 3.1 low No fix published 16 May 2025
Critical Vulnerability in libspring-java Package: Case Insensitivity Issue in DataBinder 3.1 low No fix published 18 Oct 2024
Critical Vulnerabilities in libspring-java: Denial of Service and Directory Traversal Risks N/A unrated 3.0.6.RELEASE-13ubuntu0.1~esm2 17 Mar 2021
Directory Traversal Vulnerability in libspring-java Package N/A unrated 3.0.6.RELEASE-13ubuntu0.1~esm1 19 Feb 2015
Directory Traversal Vulnerability in libspring-java Package: CVE-2014-3625 N/A unrated 3.0.6.RELEASE-13ubuntu0.1~esm1 20 Nov 2014

Looking for another version, or everything Vulert holds for libspring-java?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About libspring-java 3.0.6.RELEASE-10

Is libspring-java 3.0.6.RELEASE-10 vulnerable?

Yes. 47 vulnerabilities in the Vulert database cover libspring-java 3.0.6.RELEASE-10: 4 critical, 16 high, 21 medium and 3 low, plus 3 not yet rated. Each entry above names the fixed version to move to.

How do I monitor libspring-java for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libspring-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.