RHLW-2026-11AB22698DD7C623 Lightwell Security Advisory: spring-boot-loader 2.7.18.rhlw-00004

Red Hat Lightwell has released org.springframework.boot:spring-boot-loader 2.7.18.rhlw-00004 with a backported security fix. CVE-2024-38807: Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may ...