Skip to content
OpenAdvisories

Package · Maven

org.springframework.boot:spring-boot-starter-mail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-40992

    Mail Auto-Configuration Does Not Enable SSL Hostname Verification

    Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected. Affected versions: Spring Boot 4.0.0 th…

    Spring Spring Boot org.springframework.boot:spring-boot-starter-mail Maven