Spring Spring Tools for Eclipse

• CVE-2026-59326 Low 3.3 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server 0.1%
• CVE-2026-59328 Medium 4.2 Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips 0.2%
• CVE-2026-59327 Medium 4.4 Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations 0.1%
• CVE-2026-47882 High 8.3 Spring Boot DevTools remote secret generated with a non-cryptographic PRNG 0.2%
• CVE-2026-47873 High 8.0 Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces 0.3%
• CVE-2026-47858 High 8.0 live information startup mode is vulnerable for remote code execution 0.3%