Threats affecting pkg:maven/org.springframework.boot/spring-tools-eclipse

CVE-2026-59326 is a low-severity vulnerability in Spring Tools for Eclipse (version 5.2.0 and earlier) where the Spring Boot language server logs the raw value of proxy environment variables, including embedded Basic-auth credentials, at INFO level without redaction. This can lead to unintended disclosure of proxy credentials through log files, which may be accessible to other local users or attached to bug reports.