Product

com.github.ulisesbocchio/jasypt-spring-boot vulnerabilities

1 published CVE affecting com.github.ulisesbocchio/jasypt-spring-boot, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.github.ulisesbocchio/jasypt-spring-boot CVEs

Newest publication first

CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
Published 2026-05-24

MediumCVSS 6.3 EPSS 0.20%

A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the com...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.github.ulisesbocchio/jasypt-spring-boot vulnerabilities

Latest com.github.ulisesbocchio/jasypt-spring-boot CVEs

CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt