VDB

GHSA-8v8j-3hxp-93wr

GHSA-8v8j-3hxp-93wr PUBLISHED CVSS 9.100000381469727 CRITICAL

Spring Boot's default security filter chain has no authorization rule with Actuator but without Health

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Mavenorg.springframework.boot:spring-boot4.0.0

Timeline

  • Apr 28, 2026 CVE Published
  • May 7, 2026 Security Advisory
  • May 13, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›