{"items":[{"id":"CVE-2026-41001","published":"2026-06-11T05:04:28.663Z","updated":"2026-06-23T19:54:20.854Z","title":"Predictable Temp Directory in Artemis Auto-configuration","severity":"MEDIUM","score":5.3,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00094,"kevAdded":null},{"id":"CVE-2026-40992","published":"2026-06-11T05:03:53.539Z","updated":"2026-06-23T19:46:36.493Z","title":"Mail Auto-Configuration Does Not Enable SSL Hostname Verification","severity":"MEDIUM","score":5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-40977","published":"2026-04-27T23:36:06.654Z","updated":"2026-04-28T14:34:36.220Z","title":"When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the…","severity":"MEDIUM","score":4.7,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-40976","published":"2026-04-27T23:34:51.422Z","updated":"2026-07-15T01:00:17.230Z","title":"In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable,…","severity":"CRITICAL","score":9.1,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00489,"kevAdded":null},{"id":"CVE-2026-40975","published":"2026-04-27T23:32:58.596Z","updated":"2026-07-15T01:00:19.147Z","title":"Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used…","severity":"MEDIUM","score":4.8,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-40974","published":"2026-04-27T23:31:40.629Z","updated":"2026-04-28T12:41:52.250Z","title":"Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot…","severity":"MEDIUM","score":5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-40973","published":"2026-04-27T23:29:51.946Z","updated":"2026-04-29T03:55:43.148Z","title":"A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When…","severity":"HIGH","score":7,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-40972","published":"2026-04-27T23:15:19.194Z","updated":"2026-04-29T03:55:44.263Z","title":"An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme…","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2026-40971","published":"2026-04-27T22:45:13.327Z","updated":"2026-04-28T12:46:29.029Z","title":"When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker.…","severity":"MEDIUM","score":5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2026-40970","published":"2026-04-27T19:09:58.835Z","updated":"2026-04-27T19:30:55.167Z","title":"When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the…","severity":"MEDIUM","score":5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-22731","published":"2026-03-19T22:36:15.112Z","updated":"2026-03-20T15:33:43.191Z","title":"Authentication Bypass under Actuator Health groups paths","severity":"HIGH","score":8.2,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2025-22235","published":"2025-04-28T07:10:35.370Z","updated":"2025-05-16T23:03:06.227Z","title":"Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed","severity":"HIGH","score":7.3,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2024-38807","published":"2024-08-23T08:26:11.826Z","updated":"2025-03-27T16:36:21.258Z","title":"CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader","severity":"MEDIUM","score":6.3,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.00123,"kevAdded":null},{"id":"CVE-2023-34055","published":"2023-11-28T08:27:25.132Z","updated":"2025-02-13T16:55:15.158Z","title":"Spring Boot server Web Observations DoS Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.01219,"kevAdded":null},{"id":"CVE-2019-3797","published":"2019-05-06T15:21:37.081Z","updated":"2024-09-16T17:33:03.727Z","title":"Additional information exposure with Spring Data JPA derived queries","severity":"LOW","score":3.5,"vendor":"Spring","product":"Spring Boot","kev":false,"epss":0.01087,"kevAdded":null}]}