{"action":"Upgrade org.springframework:spring-web to 5.3.33 (5.3.x), 6.0.18 (6.0.x) or 6.1.5 (6.1.x) or later.","affected":[{"fixed":"6.1.5","introduced":"6.1.0"},{"fixed":"6.0.18","introduced":"6.0.0"},{"fixed":"5.3.33","introduced":"0"}],"component":"org.springframework:spring-web","cve_ids":["CVE-2024-22259"],"ecosystem":"Maven","epss":0.02573,"exploited":false,"fixed_versions":["6.1.5","6.0.18","5.3.33"],"ghsa_id":"GHSA-hgjh-9rj2-g67j","id":"tcs_01M5N90MAWXZS2QDVPHWES4052","modified_at":"2026-09-10T03:50:10.753799391Z","published_at":"2024-03-16T06:30:27Z","references":["https://osv.dev/vulnerability/GHSA-hgjh-9rj2-g67j","https://nvd.nist.gov/vuln/detail/CVE-2024-22259","https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb","https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501","https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68","https://github.com/spring-projects/spring-framework","https://security.netapp.com/advisory/ntap-20240524-0002","https://spring.io/security/cve-2024-22259"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-hgjh-9rj2-g67j","url":"https://osv.dev/vulnerability/GHSA-hgjh-9rj2-g67j"}],"summary":"Spring Framework URL Parsing with Host Validation Vulnerability"}