Skip to content
OpenAdvisories

Product · Spring

Spring Tools for Eclipse

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-59326

    HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

    The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy …

    Spring Spring Tools for Eclipse Spring Tools for VSCode / Cursor / Theia