Security fixes in spring-boot 3.4.13-r0
Affects spring-bootSource GCVE Database
Fixed in 3.4.13-r0 : update spring-boot when convenient.
Data as of 09/09/2026, 13:39:37 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 3.4.13-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartspring-boot | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to spring-boot version 3.4.13-r0 to apply the security fixes for the two identified vulnerabilities. Since a patch is available and the vulnerabilities are fixed in this release, updating is the recommended remediation step.
Description
The spring-boot package version 3.4.13-r0 includes security fixes addressing two vulnerabilities identified as ghsa-4265-ccf5-phj5 and ghsa-4g9r-vxhx-9pgx. These vulnerabilities have been resolved in this specific version. No CVSS score is provided for these issues, and there are no known exploits in the wild at this time.
Impact
The impact is limited to the presence of two vulnerabilities in versions prior to 3.4.13-r0 of spring-boot. Since the vulnerabilities are fixed in this version and no known exploits exist in the wild, the risk to users who have updated is mitigated. Users running earlier versions remain potentially exposed to these vulnerabilities.
Summary
Spring-boot version 3.4.13-r0 contains patches for two distinct security vulnerabilities referenced by their GHSA identifiers. The details of these vulnerabilities are not specified in the provided data, but the release of this version indicates that the issues have been addressed. No further technical details or CVSS metrics are available to elaborate on the nature or impact of these vulnerabilities.