[GHSA-mgvc-8q2h-5pgc] Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

[yeikel]

Updates

• Affected products
• Description

Comments
Improve description using data from https://spring.io/security/cve-2026-22733

[helixplant]

Hi,
Thanks for the suggestion. We’re going to keep the current description as-is, since the advisory already links to https://spring.io/security/cve-2026-22733 in the references and there isn’t a clear benefit to changing the text.

[yeikel]

Hi, Thanks for the suggestion. We’re going to keep the current description as-is, since the advisory already links to https://spring.io/security/cve-2026-22733 in the references and there isn’t a clear benefit to changing the text.

The benefit is to keep all the context in place which helps various tools that read the dependabot alerts directly