Threats tagged 'ghsa-mqvw-jfmh-93qq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.0	CVE-2026-40974Org.springframework.boot:spring boot cassandra: Spring Boot's Cassandra SSL auto-configuration disables TLS hostname Medium5.02026-04-28GCVE DatabaseCVE-2026-40974 Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification, which means it does not verify the hostname when establishing an SSL connection to Cassandra. This affects multiple Spring Boot versions prior to their respective fixes. The vulnerability is fixed in versions 4.0.6, 3.5.14, 3.4.16, 3.3.19, and 2.7.33. The CVSS score is 5.0, indicating a medium severity issue. Report on CVE-2026-40974 Vulnerability CWE-295 #ghsa-mqvw-jfmh-93qq #maven	GCVE Database	2026-04-28

Page 1 of 1