← All advisories

Medium severity5.3OSV Advisory· Published Jul 4, 2025· Updated Apr 15, 2026

CVE-2025-53602

CVE-2025-53602

Description

Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.zipkin:zipkin-serverMaven	<= 3.5.1	—

Affected products

2

Openzipkin/ZipkinOSV
Range: 1.0.0, 1.1.0, 1.1.3, …
ghsa-coords
pkg:maven/io.zipkin/zipkin-server
Range: <= 3.5.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-794x-8x6x-qpfcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-53602ghsaADVISORY
github.com/openzipkin/zipkin/commit/3c7605dfdfab2dd341cf0ea121a56cefcd580d9envdWEB
github.com/openzipkin/zipkin/pull/3804nvdWEB
zipkin.ioghsaWEB
zipkin.ionvd

News mentions

0

No linked articles in our index yet.