Security fixes in spring-boot 3.5.13-r0
Affects spring-bootSource GCVE Database
Fixed in 3.5.13-r0 : update spring-boot when convenient.
Data as of 09/09/2026, 13:39:54 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 3.5.13-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartspring-boot | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to spring-boot version 3.5.13-r0, which contains the fix for the vulnerability ghsa-j288-q9x7-2f5v. Since a patch is available, applying this update is the recommended remediation step.
Description
The spring-boot package version 3.5.13-r0 addresses one security vulnerability identified as ghsa-j288-q9x7-2f5v. A patch is available in this version to fix the issue. No CVSS score or detailed impact information is provided for the vulnerability. There are no known exploits in the wild related to this vulnerability. Users should update to this fixed version to remediate the vulnerability.
Impact
The vulnerability affects spring-boot prior to version 3.5.13-r0. The exact impact is not detailed in the provided data, and no active exploitation is known. Without CVSS or further technical details, the impact cannot be precisely assessed but the presence of a fix suggests a security risk that has been addressed.
Summary
Spring-boot version 3.5.13-r0 includes a security fix for one vulnerability tracked as ghsa-j288-q9x7-2f5v. The vulnerability details and impact are not specified, and no CVSS score is assigned. The package is not a cloud service, and no known active exploitation has been reported. The fix is included in the specified version, indicating that upgrading to 3.5.13-r0 remediates the issue.