org.springframework.boot:spring-boot-cassandra vulnerabilities (Maven)

3 vulnerabilities.

• org.springframework.boot:spring-boot-cassandra Maven Spring Boot's PID file write follows symlinks at predictable default path CVE-2026-40977 Fix available 4.7 MediumApril 27, 2026
• org.springframework.boot:spring-boot-cassandra Maven Spring Boot's random value property source uses a weak PRNG unsuitable for secrets CVE-2026-40975 Fix available 4.8 MediumApril 27, 2026
• org.springframework.boot:spring-boot-cassandra Maven Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification CVE-2026-40974 Fix available 5.0 MediumApril 27, 2026