| CVE-2026-59315 |
The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads
|
5.3
Medium
|
Aug 27, 2026 |
| CVE-2026-47894 |
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the…
|
4.9
Medium
|
Aug 27, 2026 |
| CVE-2026-47837 |
Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to…
|
6.8
Medium
|
Aug 26, 2026 |
| CVE-2026-47836 |
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN…
|
7.2
High
|
Aug 26, 2026 |
| CVE-2026-40981 |
When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the…
|
7.5
High
|
May 7, 2026 |
| CVE-2026-41002 |
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git…
|
7.4
High
|
May 7, 2026 |
| CVE-2026-41004 |
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs
|
4.4
Medium
|
May 7, 2026 |
| CVE-2026-40982 |
Spring Cloud Config allows applications to serve arbitrary text and binary files through the…
|
9.1
Critical
|
May 7, 2026 |
| CVE-2025-22232 |
Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to…
|
5.3
Medium
|
Apr 10, 2025 |
| CVE-2019-3799 |
Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6,…
|
Not rated
|
May 6, 2019 |