maven package report

Is org.springframework.integration:spring-integration-ws safe?

1 known vulnerability, worst severity LOW.

cvss

2.5

how bad it is if exploited, out of 10

epss

2.8%

chance of exploitation in the next 30 days

xyz score

1.1

CyberXYZ composite, out of 10

fig. 01 — GHSA-wr5r-m8pc-85j9, the advisory selected below

// advisories

GHSA-wr5r-m8pc-85j9

LOWCVE-2019-3772

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Affected: >= 5.0.0, < 5.0.11, < 4.3.19, >= 5.1.0, < 5.1.2
Fixed in: 5.0.11
Weakness: CWE-611
Published: 2019-01-25
Source: github

GHSA NVD MITRE reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 03:30 UTC. The most recent advisory here was published 2019-01-25. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.springframework.integration:spring-integration-ws safe? maven package security report | CyberXYZ