Spring Tools (Broadcom) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 93 known versions, newest CVE from 2026-07-30. Vendor: Broadcom.

CVEs of Spring Tools

• CVE-2026-59326 - CVSS 3.3 (low), 2026-07-30: The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variable at INFO level whenever it creates…
• CVE-2026-59328 - CVSS 5.4 (medium), 2026-07-30: Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browser) with JavaScript enabled. Using…
• CVE-2026-59327 - CVSS 4.4 (medium), 2026-07-30: Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the "Spring Boot…
• CVE-2026-47882 - CVSS 8.3 (high), 2026-07-30: When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot…
• CVE-2026-47873 - CVSS 8 (high), 2026-07-30: The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than…
• CVE-2026-47858 - CVSS 8 (high), 2026-07-30: Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote…