Known vulnerabilities in Spring Tools for VSCode / Cursor / Theia
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-59326 | The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment… | 3.3 Low | Jul 30, 2026 |
| CVE-2026-47858 | Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running… | 8.0 High | Jul 30, 2026 |