Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
XML External Entity (XXE) InjectionCVE-2019-3774
Affects org.springframework.batch:spring-batch-core | Versions [4.1.0.RELEASE,4.1.1.RELEASE)[4.0.0.RELEASE,4.0.2.RELEASE)[3.0.9.RELEASE,3.0.10.RELEASE)
Has fix
MavenPublished 16 Jan 2019
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47881
Affects org.springframework.batch:spring-batch-infrastructure | Versions [4.3.0, 6.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Symlink AttackCVE-2026-40977
Affects org.springframework.boot:spring-boot | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • H
Insecure Temporary FileCVE-2026-40973
Affects org.springframework.boot:spring-boot | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • H
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)CVE-2026-40975
Affects org.springframework.boot:spring-boot | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • H
Insecure Temporary FileCVE-2022-27772
Affects org.springframework.boot:spring-boot | Versions [,2.2.11.RELEASE)
Has fix
MavenPublished 31 Mar 2022
  • C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • M
Denial of Service (DoS)CVE-2023-34055
Affects org.springframework.boot:spring-boot-actuator | Versions [,2.7.18)[3.0.0,3.0.13)[3.1.0,3.1.6)
Has fix
MavenPublished 2 Feb 2024
  • C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22731
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [3.4.0,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-22733
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [,3.5.12)[4.0.0-M1,4.0.4)
Has fix
MavenPublished 20 Mar 2026
  • M
Improper Input ValidationCVE-2025-22235
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [2.7.0,3.3.11)[3.4.0,3.4.5)
Has fix
MavenPublished 25 Apr 2025
  • H
Access Restriction BypassCVE-2023-20873
Affects org.springframework.boot:spring-boot-actuator-autoconfigure | Versions [,2.5.15)[2.6.0,2.6.15)[2.7.0,2.7.11)[3.0.0,3.0.6)
Has fix
MavenPublished 21 Apr 2023
  • M
Insecure Temporary FileCVE-2026-41001
Affects org.springframework.boot:spring-boot-artemis | Versions [4.0.0-M1, 4.0.7)
Has fix
MavenPublished 27 Jul 2026
  • M
Insecure Temporary FileCVE-2026-41001
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [, 3.5.15)[4.0.0-M1, 4.0.7)[4.1.0-M1, 4.1.0)
Has fix
MavenPublished 11 Jun 2026
  • L
Improper Validation of Certificate with Host MismatchCVE-2026-40992
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [3.4.0,3.5.15)[4.0.0-M1,4.0.7)
Has fix
MavenPublished 11 Jun 2026
  • C
Improper Validation of Certificate with Host MismatchCVE-2026-40971
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [3.2.0,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • C
Improper Validation of Certificate with Host MismatchCVE-2026-40974
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • H
Denial of Service (DoS)CVE-2023-20883
Affects org.springframework.boot:spring-boot-autoconfigure | Versions [,2.5.15)[2.6.0,2.6.15)[2.7.0,2.7.12)[3.0.0,3.0.7)
Has fix
MavenPublished 19 May 2023
  • H
Timing AttackCVE-2026-40972
Affects org.springframework.boot:spring-boot-devtools | Versions [,3.5.14)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • L
Improper Validation of Certificate with Host MismatchCVE-2026-40970
Affects org.springframework.boot:spring-boot-elasticsearch | Versions [,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2024-38807
Affects org.springframework.boot:spring-boot-loader | Versions [3.2.0,3.2.9)[3.3.0,3.3.3)
Has fix
MavenPublished 23 Aug 2024
  • H
Improper Verification of Cryptographic SignatureCVE-2024-38807
Affects org.springframework.boot:spring-boot-loader-classic | Versions [3.2.0,3.2.9)[3.3.0,3.3.3)
Has fix
MavenPublished 23 Aug 2024
  • M
Symlink privilege escalationCVE-2018-1196
Affects org.springframework.boot:spring-boot-loader-tools | Versions [1.5.0.RELEASE,1.5.10.RELEASE)
Has fix
MavenPublished 6 Feb 2018
  • L
Improper Validation of Certificate with Host MismatchCVE-2026-40992
Affects org.springframework.boot:spring-boot-mail | Versions [3.4.0,3.5.15)[4.0.0-M1,4.0.7)
Has fix
MavenPublished 27 Jul 2026
  • C
Missing AuthorizationCVE-2026-40976
Affects org.springframework.boot:spring-boot-security | Versions [,4.0.6)
Has fix
MavenPublished 24 Apr 2026
  • C
Arbitrary Code ExecutionCVE-2017-8046
Affects org.springframework.boot:spring-boot-starter-data-rest | Versions [,1.5.9.RELEASE)
Has fix
MavenPublished 16 Apr 2018
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-59315
Affects org.springframework.cloud:spring-cloud-config-monitor | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-47836
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-47894
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026