GHSA-vg5q-95gg-rqfg
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 26, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.