Spring / Spring Boot
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-41001 | Predictable Temp Directory in Artemis Auto-configuration | MEDIUM | 5.3 | Jun 11, 2026 |
| CVE-2026-40992 | Mail Auto-Configuration Does Not Enable SSL Hostname Verification | MEDIUM | 5.0 | Jun 11, 2026 |
| CVE-2026-40977 | Spring Boot: Spring Boot: Local file corruption via PID file manipulation | MEDIUM | 6.7 | Apr 27, 2026 |
| CVE-2026-40976 | Spring Boot: Spring Boot: Security bypass due to ineffective default web security | CRITICAL | 9.1 | Apr 27, 2026 |
| CVE-2026-40975 | Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure. | HIGH | 8.2 | Apr 27, 2026 |
| CVE-2026-40974 | Spring Boot: Cassandra: Spring Boot: Security bypass in Cassandra SSL connections | CRITICAL | 9.8 | Apr 27, 2026 |
| CVE-2026-40973 | Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory | HIGH | 7.0 | Apr 27, 2026 |
| CVE-2026-40972 | Spring Boot: Spring Boot: Remote code execution via timing attack in DevTools remote secret comparison | HIGH | 7.5 | Apr 27, 2026 |
| CVE-2026-40971 | Spring Boot: Spring Boot: Information disclosure and data tampering via missing hostname verification | CRITICAL | 9.1 | Apr 27, 2026 |
| CVE-2026-40970 | Spring Boot: Spring Boot: Missing hostname verification in Elasticsearch auto-configuration allows information disclosure | MEDIUM | 6.8 | Apr 27, 2026 |
| CVE-2026-22731 | Authentication Bypass under Actuator Health groups paths | HIGH | 8.2 | Mar 19, 2026 |
| CVE-2025-22235 | Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed | HIGH | 7.3 | Apr 28, 2025 |
| CVE-2024-38807 | CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader | HIGH | 7.2 | Aug 23, 2024 |
| CVE-2023-34055 | Spring Boot server Web Observations DoS Vulnerability | MEDIUM | 6.5 | Nov 28, 2023 |
| CVE-2019-3797 | Additional information exposure with Spring Data JPA derived queries | MEDIUM | 5.3 | May 6, 2019 |
Showing 1 to 15 of 15 CVEs