Threats tagged 'ghsa-56v8-86gj-66jp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-40972Org.springframework.boot:spring boot devtools: Spring Boot DevTools remote secret comparison is vulnerable to timing High7.52026-04-28GCVE DatabaseCVE-2026-40972 A timing attack vulnerability exists in the remote secret comparison mechanism of Spring Boot DevTools. An attacker on the same network could exploit this to infer the remote secret, potentially allowing them to upload modified classes and achieve remote code execution. This affects multiple Spring Boot versions prior to fixed releases. Report on CVE-2026-40972 Vulnerability CWE-208 #ghsa-56v8-86gj-66jp #maven	GCVE Database	2026-04-28

Page 1 of 1