Threats tagged 'ghsa-5368-6h4h-gr29'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.7	CVE-2026-40977Org.springframework.boot:spring boot cassandra: Spring Boot's PID file write follows symlinks at predictable default Medium4.72026-04-28GCVE DatabaseCVE-2026-40977 A vulnerability in Spring Boot's ApplicationPidFileWriter allows a local attacker with write access to the PID file location to corrupt a file on the host each time the application starts. This affects multiple Spring Boot versions prior to fixed releases. The issue involves following symlinks at predictable default locations, enabling file corruption. Report on CVE-2026-40977 Vulnerability CWE-59 #ghsa-5368-6h4h-gr29 #maven	GCVE Database	2026-04-28

Page 1 of 1