pom.xml - Trivy Report - 2026-06-15 12:06:49.544941139 +0000 UTC m=+15.128402434
pom
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
org.springframework.boot:spring-boot-starter-actuator
CVE-2026-22731
HIGH
3.5.7
3.5.12, 4.0.4
https://access.redhat.com/security/cve/CVE-2026-22731
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2026-22731
https://spring.io/security/cve-2026-22731
https://www.cve.org/CVERecord?id=CVE-2026-22731
org.springframework.boot:spring-boot-starter-actuator
CVE-2026-22733
HIGH
3.5.7
4.0.4, 3.5.12
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2026-22733
https://spring.io/security/cve-2026-22733
org.springframework.cloud:spring-cloud-gateway-server
CVE-2025-41253
HIGH
4.3.1
4.3.2, 4.2.6
https://github.com/spring-cloud/spring-cloud-gateway
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2025-41253
https://spring.io/security/cve/2025-41253
https://www.cve.org/CVERecord?id=CVE-2025-41253
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type
Misconf ID
Check
Severity
Message
Dockerfile Security Check
DS026
No HEALTHCHECK defined
LOW
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026