Known vulnerabilities in spring-boot 3.1.1
Vendor:
Broadcom
Software:
spring-boot
Version:
3.1.1
Software CPE:
cpe:2.3:a:broadcom:spring-boot:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
4.1.1
4.0.8
3.5.16
2.7.34
3.3.20
3.4.17
3.5.14.1
4.0.6.1
4.1.0
4.0.7
3.5.15
3.4.16
3.3.19
2.7.33
4.0.6
3.5.14
2.7.32
3.3.18
3.4.15
2.7.31
3.3.17
3.4.14
4.0.5
3.5.13
4.0.4
3.5.12
4.0.3
3.5.11
4.0.2
3.5.10
4.0.1
3.5.9
3.4.13
4.0.0
3.5.8
3.4.12
3.5.7
3.4.11
3.5.6
3.4.10
3.5.5
3.4.9
3.5.4
3.4.8
3.5.3
3.5.2
3.5.1
3.4.7
3.3.13
3.5.0
3.4.6
3.3.12
2.7.25
3.2.14
3.1.16
2.7.24
2.7.23
3.1.15
3.1.14
3.2.13
3.4.5
3.3.11
3.4.4
3.3.10
3.4.3
3.3.9
3.4.2
3.3.8
3.4.1
3.3.7
3.4.0
3.3.6
3.2.12
3.3.5
3.2.11
3.3.4
3.2.10
2.7.22
2.7.21
2.7.20
2.7.19
3.1.13
3.0.17
3.0.16
3.0.15
3.0.14
3.3.3
3.2.9
3.3.2
3.2.8
3.3.1
3.2.7
3.3.0
3.2.6
3.1.12
3.2.5
3.1.11
3.2.4
3.1.10
3.2.3
3.1.9
3.2.2
3.1.8
3.2.1
3.1.7
3.2.0
3.1.6
3.0.13
2.7.18
3.1.5
3.0.12
2.7.17
3.1.4
3.0.11
2.7.16
3.1.3
3.0.10
2.7.15
3.1.2
3.0.9
2.7.14
3.1.1
3.0.8
2.7.13
3.1.0
2.6.15
2.5.15
3.0.7
2.7.12
3.0.6
2.7.11
3.0.5
2.7.10
3.0.4
3.0.3
2.7.9
3.0.2
2.7.8
3.0.1
2.7.7
3.0.0
2.7.6
2.6.14
2.7.5
2.6.13
2.7.4
2.6.12
2.7.3
2.6.11
2.7.2
2.6.10
2.7.1
2.6.9
2.7.0
2.6.8
2.5.14
2.6.7
2.5.13
2.6.6
2.5.12
2.6.5
2.5.11
2.6.4
2.5.10
2.6.3
2.5.9
2.6.2
2.5.8
2.6.1
2.6.0
2.5.7
2.4.13
2.5.6
2.4.12
2.4.11
2.5.5
2.5.4
2.4.10
2.5.3
2.4.9
2.5.2
2.4.8
2.5.1
2.3.12
2.4.7
2.5.0
2.4.6
2.3.11
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.13
2.2.12
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
1.5.22
1.5.21
1.5.20
1.5.19
1.5.18
1.5.17
1.5.16
1.5.15
1.5.14
1.5.13
1.5.12
1.5.11
1.5.7
1.5.5
1.5.3
1.5.1
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.1
1.4.0
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
2.2.11
1.5.10
2.0.0.M7
2.0.0.M6
2.0.0.M5
2.0.0.M4
2.0.0.M3
2.0.0.M2
2.0.0.M1
2.0.0
1.5.9
1.5.6
1.5.4
1.5.8
1.5.2
1.4.2
1.5.0
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134321 - Insecure Temporary File CVE-2026-41001 |
CWE-377 | Low | 2.7.34, 3.3.20, 3.4.17, 3.5.14.1, 3.5.15, 4.0.6.1, 4.0.7 | 11.06.2026 |
SB2026061136 SB2026073114 |
||
| #VU128235 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-40977 |
CWE-59 | Low | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 2 more |
||
| #VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2026-40975 |
CWE-338 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 3 more |
||
| #VU128233 - Improper Validation of Certificate with Host Mismatch CVE-2026-40974 |
CWE-297 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB20260528266 and 2 more |
||
| #VU128232 - Improper Access Control CVE-2026-40973 |
CWE-284 | Low | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 2 more |
||
| #VU128231 - Information Exposure Through Timing Discrepancy CVE-2026-40972 |
CWE-208 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 |
||
| #VU107966 - Missing Authorization CVE-2025-22235 |
CWE-862 | Medium | 2.7.25, 3.1.16, 3.2.14, 3.3.11, 3.4.5 | 25.04.2025 |
SB2025042526 SB2025060429 SB2025060529 and 15 more |
||
| #VU96484 - Improper Verification of Cryptographic Signature CVE-2024-38807 |
CWE-347 | Low | 2.7.22, 3.0.17, 3.1.13, 3.2.9, 3.3.3 | 23.08.2024 |
SB2024082337 SB2025012192 SB2025012468 and 1 more |
||
| #VU83582 - Improper input validation CVE-2023-34053 |
CWE-20 | Medium | 2.7.18, 3.0.13, 3.1.6 | 29.11.2023 |
SB2023112966 SB2023112967 SB2024011661 and 13 more |
||
| #VU83581 - Improper input validation CVE-2023-34055 |
CWE-20 | Medium | 2.7.18, 3.0.13, 3.1.6 | 29.11.2023 |
SB2023112967 SB2024011660 SB2024011661 and 22 more |