CVE-2026-40976

CVE-2026-40976 affects Spring Boot 4.0.0–4.0.5. In vulnerable configurations, a servlet-based web application that relies on Spring Boot’s default web security (no custom Spring Security config), depends on spring-boot-actuator-autoconfigure, and does not rely on spring-boot-health can experience...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2024-13173

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13173

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13173 Health information leakage vulnerability

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

PT-2025-2036 · Unknown · Health Module

Name of the Vulnerable Software and Affected Versions: Health module affected versions not specified Description: The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a newer...