- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 medium
- Registry
- Maven Central
Advisories 3
- CVE-2026-40977Medium 4.7
When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can…
Affected: from 4.0.0, fixed in 4.0.6; from 3.5.0, fixed in 3.5.14; from 3.4.0, through 3.4.15; from 3.3.0, through 3.3.18; through 2.7.32.
- CVE-2026-40975Medium 4.8
Values produced by ${random.value} are not suitable for use as secrets.
Affected: from 4.0.0, fixed in 4.0.6; from 3.5.0, fixed in 3.5.14; from 3.4.0, through 3.4.15; from 3.3.0, through 3.3.18; through 2.7.32.
- CVE-2026-40974Medium 5.0
Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra.
Affected: from 4.0.0, fixed in 4.0.6; from 3.5.0, fixed in 3.5.14; from 3.4.0, through 3.4.15; from 3.3.0, through 3.3.18; through 2.7.32.