CVE-2026-59327

Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...

CVE-2026-59147

CVE-2026-59147 – Data::DisjointSet::Shared (Perl) affects versions before 0.02. The root cause is an unvalidated, raw file-stored index used by dsu_find to walk and path‑compress parent[x], never bounded against the node count. The attach-time header validation validates header scalars but not th...