Skip to content
OpenAdvisories

Package · Maven

org.springframework.boot:spring-boot-devtools

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-40972

    Spring Boot DevTools remote secret comparison is vulnerable to timing attacks

    An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the attacker determining the secret and uploading changed classes, …

    Spring Spring Boot org.springframework.boot:spring-boot-devtools Maven