Java Aodeng maintains a narrowly scoped product line centered on the Hope Boot framework, a Java-based boot component appearing in a modestly represented but above-typical share of vulnerability disclosures. Current severity, exploitation, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Java Aodeng over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-45611CRITICAL Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request. | May 5, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-6551MEDIUM A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function Login of the file /src/main/java/com/hope/controller/WebCont | Jun 24, 2025 | 5.4 | 16 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Java Aodeng.
Media articles that mention a CVE ID that affects a product developed by Java Aodeng — matched by CVE ID, not by vendor name.