Maven/com.github.ulisesbocchio:jasypt-spring-boot CVE-2026-9370: low 3.7, EPSS 0.20%
jasypt-spring-boot Uses a One-Way Hash without a Salt
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | - | 4.0.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jgj7-c8vj-w563
- https://nvd.nist.gov/vuln/detail/CVE-2026-9370
- https://github.com/dntyfate/cve/issues/3
- https://github.com/ulisesbocchio/jasypt-spring-boot/issues/431
- https://github.com/ulisesbocchio/jasypt-spring-boot
- https://vuldb.com/submit/813198
- https://vuldb.com/vuln/365333
- https://vuldb.com/vuln/365333/cti
CVE-2026-9370 · published · modified · JSON