club.zhcs:axe-sigar (>=1.5.13, <=1.5.13.2), com.netflix.genie:genie-app (>=3.3.10, <=3.3.22) +314 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.13.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - club.zhcs:axe-sigar =1.5.13, =3.3.10, =3.3.1...

com.github.zed-platform:zed-shell (>=0.0.8, <=0.0.10), com.payu.ratel:ratel-core (>=1.2.0, <=1.2.1) +9 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.0.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.github.zed-platform:zed-shell =0.0.8,...

com.alibaba.spring.boot:dubbo-spring-boot-starter (>=1.0.1, <=2.0.0), com.almis.awe:awe-annotation (>=4.1.0, <=4.1.1) +138 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.10.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +6850 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (>=2.0.0.release, <=2.7.18)

org.springframework.boot:spring-boot-starter-actuator MAVEN version =2.0.0.release, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =2.1.0 - ai.ylyue:yue-library-data-mybatis j11.2.6.2 and more Source cves:...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.0.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.0.release) +105 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.16.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

club.zhcs:axe-sigar (>=1.0, <=1.1), cn.springcloud.gray:spring-cloud-bamboo (>=1.0.0, <=1.0.2) +269 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.4.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - club.zhcs:axe-sigar =1.0, =1.0.0, =a.1.0.0,...

de.codecentric:spring-boot-admin-example (1.0.2), de.codecentric:spring-boot-admin-server (1.0.2) +7 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.6.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - de.codecentric:spring-boot-admin-example 1.0....

ai.ancf.lmos:arc-runner (>=0.1.1, <=0.112.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +3434 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (>=3.0.0, <=3.3.13)

org.springframework.boot:spring-boot-starter-actuator MAVEN version =3.0.0, =0.1.1, =0.0.4, =0.1.0, =cloud-0.1, =7.0.0, =2.10.0, =3.6.0, =3.6.1 and more Source cves: CVE-2026-22733 Source advisory: GHSA-MGVC-8Q2H-5PGC...

io.github.resilience4j:resilience4j-spring-boot (>=0.12.0, <=0.12.1), org.springframework.boot:spring-boot-starter-remote-shell (1.5.5.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.5.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - io.github.resilience4j:resilience4j-spring-bo...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4), de.codecentric:cxf-spring-boot-starter (1.0.8.release) +20 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.4.4.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

au.com.mountain-pass:hyperstate (>=4, <=9), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (0.0.15) +253 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.3.5.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - au.com.mountain-pass:hyperstate =4,...

com.moelholm.tools:actuator-ui-dump (>=0.1, <=0.2), de.codecentric:spring-boot-admin-sample (1.2.4) +17 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.7.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.moelholm.tools:actuator-ui-dump =0.1,...

de.codecentric:spring-boot-admin-sample (>=1.2.2, <=1.2.3), de.codecentric:spring-boot-admin-sample-discovery (>=1.2.2, <=1.2.3) +16 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.5.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - de.codecentric:spring-boot-admin-sample =1.2....

com.revinate:henicea (>=1.0.0, <=1.1.2), de.codecentric:spring-boot-starter-batch-web (1.3.5.release) +20 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.4.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.revinate:henicea =1.0.0, =0.15.4, =0.15.4...

net.acesinc:convergent-ui (>=1.0.4, <=1.0.6), org.apache.camel:camel-example-spring-boot (2.16.0) +6 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.6.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - net.acesinc:convergent-ui =1.0.4, =1.0.6 -...

cn.zhangfusheng:zfs-api-administrator-ui (1.0.2), cn.zhangfusheng:zfs-swagger-ui (1.0.2.web) +678 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.9.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - cn.zhangfusheng:zfs-api-administrator-ui 1.0....

cn.patterncat:event-trace-client (1.3.0), cn.patterncat:springboot-metrics-starter (>=0.0.1, <=0.0.8) +6 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.4.6.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - cn.patterncat:event-trace-client 1.3.0 -...

club.zhcs:axe-sigar (>=1.2, <=1.5), com.battcn:spring-cloud-swagger-server (1.0.0-release) +334 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.6.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - club.zhcs:axe-sigar =1.2, =4.0.17, =3.1.2,...

EUVD-2026-13345

Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a specific path, already configured for a Health Group additional path. This issue affects Spring Boot: from 4.0 before...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.12.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.12.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...