Skip to content

org.springframework.boot:spring-boot-elasticsearch vulnerabilities (Maven)

1 vulnerability.

org.springframework.boot:spring-boot-elasticsearch MavenSpring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.CVE-2026-40970Fix available5.0 MediumApril 27, 2026