Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.
Moderate severity
GitHub Reviewed
Published
Apr 27, 2026
to the GitHub Advisory Database
•
Updated May 6, 2026
Give feedback on Dependabot alerts