Security
فارسی
All products

Red Hat Process Automation 7/spring-boot

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework server Web DoS VulnerabilityCVE-2024-22233 · GHSA-R4Q3-7G4Q-X89M org.springframework:spring-coreRed Hat Decision Manager 7/spring-boot MavenRed Hat High Fix reported
Spring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ brokerCVE-2026-40971 · GHSA-9VC8-QPPQ-WVXC org.springframework.boot:spring-boot-rabbitmqRed Hat AMQ Broker 7/spring-boot MavenRed Hat Medium Fix reported
Spring Boot's PID file write follows symlinks at predictable default pathCVE-2026-40977 · GHSA-5368-6H4H-GR29 org.springframework.boot:spring-boot-cassandraRed Hat AMQ Broker 7/spring-boot MavenRed Hat Medium Fix reported
Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verificationCVE-2026-40974 · GHSA-MQVW-JFMH-93QQ org.springframework.boot:spring-boot-cassandraRed Hat AMQ Broker 7/spring-boot MavenRed Hat Medium Fix reported
Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.CVE-2026-40970 · GHSA-C96X-RPM4-349P org.springframework.boot:spring-boot-elasticsearchRed Hat AMQ Broker 7/spring-boot MavenRed Hat Medium Fix reported
Spring Boot Actuator denial of service vulnerabilityCVE-2023-34055 · GHSA-JJFH-589G-3HJX org.springframework.boot:spring-boot-actuatorRed Hat AMQ Broker 7/spring-boot MavenRed Hat Medium Fix reported
Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud FoundryCVE-2023-20873 · GHSA-G5H3-W546-PJ7F org.springframework.boot:spring-boot-actuator-autoconfigureRed Hat Decision Manager 7/spring-boot MavenRed Hat Critical Fix reported