Codecentric - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2026-07-13.

Products

• Spring Boot Admin - 3 CVEs
• Spring-boot-admin - 1 CVEs

Newest CVEs of Codecentric

• CVE-2026-62242 - CVSS 8.6 (high), 2026-07-13: Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with…
• CVE-2023-38286 - CVSS 7.5 (high), 2023-07-14: Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted…
• CVE-2022-46166 - CVSS 9.8 (critical), 2022-12-09: Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server,…