Search for packages
| purl | pkg:maven/org.springframework.boot/spring-boot@3.1.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-amhw-mxxc-auev
Aliases: CVE-2025-22235 GHSA-rc42-6c7j-7h5r |
EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Security * EndpointRequest.to() has been used in a Spring Security chain configuration * The endpoint which EndpointRequest references is disabled or not exposed via web * Your application handles requests to /null and this path needs protection You are not affected if any of the following is true: * You don't use Spring Security * You don't use EndpointRequest.to() * The endpoint which EndpointRequest.to() refers to is enabled and is exposed * Your application does not handle requests to /null or this path does not need protection |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-atys-z3yr-nyaf
Aliases: CVE-2023-34055 GHSA-jjfh-589g-3hjx |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T20:00:23.772799+00:00 | GitLab Importer | Affected by | VCID-amhw-mxxc-auev | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.boot/spring-boot/CVE-2025-22235.yml | 38.6.0 |
| 2026-06-12T19:12:06.218145+00:00 | GitLab Importer | Affected by | VCID-atys-z3yr-nyaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.boot/spring-boot/CVE-2023-34055.yml | 38.6.0 |