spring Spring Boot Vulnerabilities

Spring Spring Boot vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

27 April 2026

Local File Corruption Risk in Spring Boot Versions from Pivotal
CVE-2026-40977
SpringSpring Boot4.7MEDIUM
Web Security Flaw in Spring Boot Affects Servlet-Based Applications
CVE-2026-40976
SpringSpring Boot9.1CRITICAL
Weak Random Number Generation in Spring Boot Compromises Application Secrets
CVE-2026-40975
SpringSpring Boot4.8MEDIUM
SSL Configuration Flaw in Spring Boot Affects Cassandra Connections
CVE-2026-40974
SpringSpring Boot5MEDIUM
Local Directory Vulnerability in Spring Boot Products
CVE-2026-40973
SpringSpring Boot7HIGH
Timing Attack Vulnerability in Spring Boot by Pivotal Software
CVE-2026-40972
SpringSpring Boot7.5HIGH
Hostname Verification Flaw in Spring Boot RabbitMQ Configuration by Pivotal Software
CVE-2026-40971
SpringSpring Boot5MEDIUM
Hostname Verification Flaw in Spring Boot’s Elasticsearch Auto-Configuration
CVE-2026-40970
SpringSpring Boot5MEDIUM

19 March 2026

Authentication Bypass Vulnerability in Spring Boot Actuator
CVE-2026-22731
SpringSpring Boot8.2HIGH

28 April 2025

Null Endpoint Exposure Vulnerability in Spring Security Framework
CVE-2025-22235
SpringSpring Boot7.3HIGH

23 August 2024

Spring Boot Loader Vulnerability: Signature Forgery Attack
CVE-2024-38807
SpringSpring Boot6.3MEDIUM

28 November 2023

Spring Boot server Web Observations DoS Vulnerability
CVE-2023-34055
SpringSpring Boot6.5MEDIUM

11 May 2023

Directory Traversal in Spring Boot Actuator LogView by Lukashinsch
CVE-2023-29986
Spring-boot-actua...Spring-boot-actuator-l...5.3MEDIUM

26 August 2021

Stored Cross-Site Scripting in Spring Boot Admin by Pivotal Software
CVE-2020-19704
Spring-boot-admin...Spring-boot-admin5.4MEDIUM

6 May 2019

Additional information exposure with Spring Data JPA derived queries
CVE-2019-3797
SpringSpring Boot3.5LOW