Skip to content
OpenAdvisories

Package · Maven

org.springframework.boot:spring-boot-loader-classic

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2024-38807

    CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader

    Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in…

    Spring Spring Boot libspring-java libspring-java Debian Ubuntu Maven