Advisories · Technology
Spring Tools for VSCode / Cursor / Theia.
Every CVE that names Spring Tools for VSCode / Cursor / Theia among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.3 Low
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
- Spring Tools for Eclipse
- Spring Tools for VSCode / Cursor / Theia
- Information disclosure
- CVSS 8.0 High
live information startup mode is vulnerable for remote code execution
- Spring Tools for Eclipse
- Spring Tools for VSCode / Cursor / Theia
- Authentication bypass