SB
Product
Spring Boot
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 4Low 0
Watch
Add Spring Boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22731 | 8.1 | Mar 19 | Authentication Bypass under Actuator Health groups paths Affected: 4.0 before 4.0.3; 3.5 before 3.5.11; 3.4 before 3.4.15 |
| CVE-2026-40975 | 7.5 | Apr 27 | Values produced by ${random.value} are not suitable for use as secrets Affected: 4.0.0 before 4.0.6; 3.5.0 before 3.5.14; 3.4.0 before 3.4.16; 3.3.0 before 3.3.19; 2.7.0 before 2.7.33 |
| CVE-2026-40972 | 7.5 | Apr 27 | An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret Affected: 4.0.0 before 4.0.6; 3.5.0 before 3.5.14; 3.4.0 before 3.4.16; 3.3.0 before 3.3.19; 2.7.0 before 2.7.33 |
| CVE-2026-40973 | 7.0 | Apr 27 | A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp` Affected: 4.0.0 before 4.0.6; 3.5.0 before 3.5.14; 3.4.0 before 3.4.16; 3.3.0 before 3.3.19; 2.7.0 before 2.7.33 |
Showing 4