Threats affecting pkg:maven/com.ulisesbocchio/jasypt-spring-boot

A vulnerability in ulisesbocchio jasypt-spring-boot up to versions 3.0.5 and 4.0.4 allows use of a one-way hash with a predictable salt in the getSecretKeySaltGenerator function. This weakness could be exploited remotely but requires a high level of complexity and is considered difficult to exploit. No official patch or remediation has been provided yet by the vendor.