Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:29:20 +0000 CVE-2026-40992 — Mail Auto-Configuration Does Not Enable SSL Hostname Verification https://vulnerability.circl.lu/vuln/cve-2026-40992 <p><strong>Affected:</strong> Spring Boot</p> <p>Spring Boot&#39;s Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected.</p> <p>Affected versions: Spring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16.</p> <p><strong>Affected:</strong> Spring Boot</p> <p>Spring Boot&#39;s Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected.</p> <p>Affected versions: Spring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16.</p> https://vulnerability.circl.lu/vuln/cve-2026-40992