Spring Spring Boot

• CVE-2026-41001 Medium 5.3 Predictable Temp Directory in Artemis Auto-configuration <0.1%
• CVE-2026-40992 Medium 5.0 Mail Auto-Configuration Does Not Enable SSL Hostname Verification 0.1%
• CVE-2026-40977 Medium 4.7 When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is started 0.1%
• CVE-2026-40976 Critical 9.1 In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web applicat 0.5%
• CVE-2026-40975 Medium 4.8 Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they are numeric values wit 0.3%
• CVE-2026-40974 Medium 5.0 Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3. 0.2%
• CVE-2026-40973 High 7.0 A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `true` and the attack pe 0.1%
• CVE-2026-40972 High 7.5 An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the atta 0.3%
• CVE-2026-40971 Medium 5.0 When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boot 4.0.0–4.0.5 (fix 4 0.2%
• CVE-2026-40970 Medium 5.0 When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected: Spring Boot 4.0.0–4. 0.1%
• CVE-2026-22731 High 8.2 Authentication Bypass under Actuator Health groups paths 0.3%
• CVE-2025-22235 High 7.3 Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 0.4%
• CVE-2024-38807 Medium 6.3 CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader 0.1%
• CVE-2023-34055 Medium 5.3 Spring Boot server Web Observations DoS Vulnerability 1.2%