Maven Repository: org.springframework.security » spring-security-core

Spring Security Core » 4.2.20.RELEASE

Spring Security is a powerful and highly customizable authentication and access-control framework. It provides protection against attacks like session fixation, clickjacking, cross site request forgery, etc

License	Apache 2.0
Categories	Security Frameworks
Tags	security spring framework
Organization	spring.io
HomePage	https://spring.io/spring-security
Date	Dec 09, 2020
Files	pom (9 KB) jar (409 KB) View All
Repositories	Central Alfresco CloudFlight Plugins Kyligence Public Mulesoft Sonatype
Ranking	#204 in MvnRepository (See Top Artifacts) #1 in Security Frameworks
Used By	2,697 artifacts
Vulnerabilities	Direct vulnerabilities: CVE-2024-38827 CVE-2024-22257 CVE-2022-22978 Vulnerabilities from dependencies: CVE-2024-38820 CVE-2024-38808 CVE-2023-6378 CVE-2023-20863 CVE-2023-20861 CVE-2022-42004 CVE-2022-42003 CVE-2022-41853 CVE-2022-22970 CVE-2022-22968 CVE-2022-22965 CVE-2022-22950 CVE-2021-20190 CVE-2020-36518 CVE-2020-36189 CVE-2020-36188 CVE-2020-36187 CVE-2020-36186 CVE-2020-36185 CVE-2020-36184 CVE-2020-36183 CVE-2020-36182 CVE-2020-36181 CVE-2020-36180 CVE-2020-36179 CVE-2020-35728 CVE-2020-35491 CVE-2020-35490 CVE-2020-25649 CVE-2020-24750 CVE-2020-24616 CVE-2020-15250 CVE-2020-10673 CVE-2020-10650 CVE-2017-5929 View 32 more ...

License

Apache 2.0

Tags

security spring framework

Organization

spring.io

HomePage

https://spring.io/spring-security

Date

Dec 09, 2020

Files

pom (9 KB) jar (409 KB) View All

Repositories

Central Alfresco CloudFlight Plugins Kyligence Public Mulesoft Sonatype

Ranking

#204 in MvnRepository (See Top Artifacts)
#1 in Security Frameworks

Used By

2,697 artifacts

Vulnerabilities

Direct vulnerabilities:
CVE-2024-38827
CVE-2024-22257
CVE-2022-22978

Vulnerabilities from dependencies:
CVE-2024-38820
CVE-2024-38808
CVE-2023-6378
View 32 more ...

Note: There is a new version for this artifact

New Version	6.4.4

New Version

6.4.4

Maven
Gradle
Gradle (Short)
Gradle (Kotlin)
SBT
Ivy
Grape
Leiningen
Buildr

<!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-core -->
<dependency>
    <groupId>org.springframework.security</groupId>
    <artifactId>spring-security-core</artifactId>
    <version>4.2.20.RELEASE</version>
</dependency>

// https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
implementation group: 'org.springframework.security', name: 'spring-security-core', version: '4.2.20.RELEASE'

// https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
implementation 'org.springframework.security:spring-security-core:4.2.20.RELEASE'

// https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
implementation("org.springframework.security:spring-security-core:4.2.20.RELEASE")

// https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
libraryDependencies += "org.springframework.security" % "spring-security-core" % "4.2.20.RELEASE"

<!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-core -->
<dependency org="org.springframework.security" name="spring-security-core" rev="4.2.20.RELEASE"/>

// https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
@Grapes(
    @Grab(group='org.springframework.security', module='spring-security-core', version='4.2.20.RELEASE')
)

;; https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
[org.springframework.security/spring-security-core "4.2.20.RELEASE"]

# https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
'org.springframework.security:spring-security-core:jar:4.2.20.RELEASE'

Include comment with link to declaration

Compile Dependencies (13)

Category/License	Group / Artifact	Version	Updates
AOP Public	aopalliance » aopalliance	1.0	✔
JSON Lib Apache 2.0	com.fasterxml.jackson.core » jackson-databind (optional) 23 vulnerabilities	2.8.11.6	2.18.3
Logging Apache 2.0	commons-logging » commons-logging (optional)	1.2	1.3.5
Annotation Lib CDDLGPL 2.0	javax.annotation » jsr250-api (optional)	1.0	1.3.2
Cache Impl Apache 2.0	net.sf.ehcache » ehcache (optional)	2.10.6	3.10.8
AOP EPL 2.0	org.aspectj » aspectjrt (optional)	1.8.14	1.9.23
AOP Apache 2.0	org.springframework » spring-aop	4.3.30.RELEASE	6.2.5
Dep Injection Apache 2.0	org.springframework » spring-beans 2 vulnerabilities	4.3.30.RELEASE	6.2.5
Dep Injection Apache 2.0	org.springframework » spring-context 2 vulnerabilities	4.3.30.RELEASE	6.2.5
Core Utils Apache 2.0	org.springframework » spring-core	4.3.30.RELEASE	6.2.5
Expression Lang Apache 2.0	org.springframework » spring-expression 4 vulnerabilities	4.3.30.RELEASE	6.2.5
JDBC Extension Apache 2.0	org.springframework » spring-jdbc (optional)	4.3.30.RELEASE	6.2.5
Transactions Apache 2.0	org.springframework » spring-tx (optional)	4.3.30.RELEASE	6.2.5

Category/License

Group / Artifact

Version

Updates

AOP
Public

aopalliance » aopalliance

1.0

✔

JSON Lib
Apache 2.0

com.fasterxml.jackson.core » jackson-databind (optional) 23 vulnerabilities

2.8.11.6

2.18.3

Logging
Apache 2.0

commons-logging » commons-logging (optional)

1.2

1.3.5

Annotation Lib
CDDLGPL 2.0

javax.annotation » jsr250-api (optional)

1.0

1.3.2

Cache Impl
Apache 2.0

net.sf.ehcache » ehcache (optional)

2.10.6

3.10.8

AOP
EPL 2.0

org.aspectj » aspectjrt (optional)

1.8.14

1.9.23

AOP
Apache 2.0

org.springframework » spring-aop

4.3.30.RELEASE

6.2.5

Dep Injection
Apache 2.0

org.springframework » spring-beans 2 vulnerabilities

4.3.30.RELEASE

6.2.5

Dep Injection
Apache 2.0

org.springframework » spring-context 2 vulnerabilities

4.3.30.RELEASE

6.2.5

Core Utils
Apache 2.0

org.springframework » spring-core

4.3.30.RELEASE

6.2.5

Expression Lang
Apache 2.0

org.springframework » spring-expression 4 vulnerabilities

4.3.30.RELEASE

6.2.5

JDBC Extension
Apache 2.0

org.springframework » spring-jdbc (optional)

4.3.30.RELEASE

6.2.5

Transactions
Apache 2.0

org.springframework » spring-tx (optional)

4.3.30.RELEASE

6.2.5

Test Dependencies (15)

Category/License	Group / Artifact	Version	Updates
Logging EPL 1.0LGPL 2.1	ch.qos.logback » logback-classic 2 vulnerabilities	1.1.11	1.5.18
Collections Apache 2.0	commons-collections » commons-collections	3.2.2	4.4
Testing EPL 2.0	junit » junit 1 vulnerability	4.12	5.12.1
Assertion Apache 2.0	org.assertj » assertj-core	2.2.0	3.27.3
Embedded SQL DB	org.hsqldb » hsqldb 1 vulnerability	2.3.6	2.7.4
Mocking MIT	org.mockito » mockito-core	1.10.19	5.16.1
Mocking Apache 2.0	org.powermock » powermock-api-mockito	1.6.5	2.0.9
Apache 2.0	org.powermock » powermock-api-support	1.6.5	2.0.9
Mocking Apache 2.0	org.powermock » powermock-core	1.6.5	2.0.9
Mocking Apache 2.0	org.powermock » powermock-module-junit4	1.6.5	2.0.9
Apache 2.0	org.powermock » powermock-module-junit4-common	1.6.5	2.0.9
Apache 2.0	org.powermock » powermock-reflect	1.6.5	2.0.9
Testing Apache 2.0	org.skyscreamer » jsonassert	1.4.0	1.5.3
Logging Bridge Apache 2.0	org.slf4j » jcl-over-slf4j	1.7.25	2.0.17
Testing Apache 2.0	org.springframework » spring-test	4.3.30.RELEASE	6.2.5