com.erudika:para (1.8.0), com.github.totyumengr:minicubes-cluster (0.2) +55 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.4.release)

org.springframework.boot:spring-boot MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.erudika:para 1.8.0 - com.github.totyumengr:minicubes-cluster 0.2 -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.6), co.fingerprintsoft:notification-spring-boot-starter (1.0.6) +70 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.3.4.release)

org.springframework.boot:spring-boot MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.6 -...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), cn.bestwu:starter-logging (>=0.1.6-v1, <=1.0.0) +867 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.10.release)

org.springframework.boot:spring-boot MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.1,...

com.github.advantageous:qbit-spring (>=0.9.1-rc11, <=0.9.2-rc14), com.github.jmgilmour:parker-spring-boot (0.1.0) +165 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.6.release)

org.springframework.boot:spring-boot MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.advantageous:qbit-spring =0.9.1-rc11, =2.0.1, =2.2.29, =1.0.4, =1.0....

com.foreach.across.modules:admin-web-module (1.1.1.release), com.foreach.across.modules:debug-web-module (1.0.1.release) +131 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.8.release)

org.springframework.boot:spring-boot MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.foreach.across.modules:admin-web-module 1.1.1.release -...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +36 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.7.release)

org.springframework.boot:spring-boot MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 - de.codecentric:jbehave-admin-server...

am.ik.blog:blog-domain (>=4.2.1, <=4.3.6), am.ik.blog:blog-mapper (>=4.4.1, <=4.5.0) +955 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.7.release)

org.springframework.boot:spring-boot MAVEN version 1.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.blog:blog-domain =4.2.1, =4.4.1, =0.2.13, =0.2.13, =0.2.13, =0.2.13,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-matcher (>=0.4, <=0.6) +174 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.17.release)

org.springframework.boot:spring-boot MAVEN version 1.5.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +146 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.3.8.release)

org.springframework.boot:spring-boot MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

com.alibaba.boot:dubbo-spring-boot-starter (0.1.2.release), com.foreach.across:across-core (3.1.2.release) +223 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.18.release)

org.springframework.boot:spring-boot MAVEN version 1.5.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.alibaba.boot:dubbo-spring-boot-starter 0.1.2.release -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), ai.houyi:dorado (>=0.0.6, <=0.0.8) +109 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.15.release)

org.springframework.boot:spring-boot MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter =0.1.10, =0.0.6, =0.0.11,...

com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6), com.canoo.dolphin-platform:dolphin-platform-spring-controller-tester (0.8.6) +183 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.2.release)

org.springframework.boot:spring-boot MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-server-spring =0.6.1, =0.6.1, =0.1,...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39) +236 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.7.release)

org.springframework.boot:spring-boot MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.0.3, =1.2.28, =1.1.2, =1.1.2,...

cn.com.365trade.oss:xxl-job-admin (>=2.2.1_zzlh, <=2.2.1.1_zzlh), cn.hippo4j:hippo4j-config-spring-boot-1x-starter (>=1.4.2, <=1.5.0) +438 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.22.release)

org.springframework.boot:spring-boot MAVEN version 1.5.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.com.365trade.oss:xxl-job-admin =2.2.1zzlh, =1.4.2, =a.1.1.1, =a.1.1.1,...

biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7), com.clusterra:clusterra-email-sender (>=1.0.13.release, <=1.2.0.release) +275 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.3.release)

org.springframework.boot:spring-boot MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - biz.dfch.j:activiti.wrapper =0.0.6, =1.0.13.release, =1.1.0.release,...

org.springframework.boot:spring-boot-actuator (1.1.10.release), org.springframework.boot:spring-boot-autoconfigure (1.1.10.release) +30 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.10.release)

org.springframework.boot:spring-boot MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.springframework.boot:spring-boot-actuator 1.1.10.release -...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), cn.chendahai:rocketmq-console-alarm (1.0.3) +335 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.3.release)

org.springframework.boot:spring-boot MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.0, =1.0.1, =3.0.1.3, =3.0.1.9, =3.0.1.9, =3.0....

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +806 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.2.release)

org.springframework.boot:spring-boot MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =0.2.3, =0.2.3,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.28.0) +8589 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (>=3.3.0, <=3.3.13)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-40973 Source advisory: GHSA-WWPQ-F5C3-7HVX...

Spring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ broker

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boot 4.0.0–4.0.5 fix 4.0.6, 3.5.0–3.5.13 fix 3.5.14 per vendor advisory...