Skip to content

Known vulnerabilities in Spring Tools for Eclipse

Is your version affected?

CVE Summary Score Published
CVE-2026-59326 The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment… 3.3 Low Jul 30, 2026
CVE-2026-59327 Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string… 4.4 Medium Jul 30, 2026
CVE-2026-59328 Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT… 4.2 Medium Jul 30, 2026
CVE-2026-47882 When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud… 8.3 High Jul 30, 2026
CVE-2026-47873 The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network… 8.0 High Jul 30, 2026
CVE-2026-47858 Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running… 8.0 High Jul 30, 2026

Other Spring products