PatchTheCVEspring tools vulnerabilities and fixes
Recent CVEs affecting spring tools, with upgrade or downgrade steps. 4 tracked.
spring tools has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-30. Highest priority: CVE-2026-47873 (score 38/100).
- CVE-2026-47873 HIGH 8.0 UPGRADE The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's n
- CVE-2026-47882 HIGH 8.3 UPGRADE When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or
- CVE-2026-59327 MEDIUM 4.4 UPGRADE Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a pl
- CVE-2026-59328 MEDIUM 4.2 UPGRADE Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (
FAQ
How do I fix spring tools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is spring tools being exploited right now?
None of the tracked spring tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which spring tools CVE should I patch first?
CVE-2026-47873 currently ranks highest (38/100): The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's n.