Spring Spring Boot vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20231
3. 20241
4. 20251
5. 202611

Newest CVEs

• CVE-2026-41001

  Predictable Temp Directory in Artemis Auto-configuration

  Spring · Spring Boot

  Medium5.3
• CVE-2026-40992

  Mail Auto-Configuration Does Not Enable SSL Hostname Verification

  Spring · Spring Boot

  Medium5.0
• CVE-2026-40977

  When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the…

  Spring · Spring Boot

  Medium4.7
• CVE-2026-40976

  In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable,…

  Spring · Spring Boot

  Critical9.1
• CVE-2026-40975

  Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used…

  Spring · Spring Boot

  Medium4.8
• CVE-2026-40974

  Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot…

  Spring · Spring Boot

  Medium5.0
• CVE-2026-40973

  A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When…

  Spring · Spring Boot

  High7.0
• CVE-2026-40972

  An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme…

  Spring · Spring Boot

  High7.5
• CVE-2026-40971

  When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker.…

  Spring · Spring Boot

  Medium5.0
• CVE-2026-40970

  When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the…

  Spring · Spring Boot

  Medium5.0