| CVE-2026-59315 |
The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads
|
5.3
Moyenne
|
27 août 2026 |
| CVE-2026-47894 |
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the…
|
4.9
Moyenne
|
27 août 2026 |
| CVE-2026-47837 |
Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to…
|
6.8
Moyenne
|
26 août 2026 |
| CVE-2026-47836 |
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN…
|
7.2
Élevée
|
26 août 2026 |
| CVE-2026-40981 |
When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the…
|
7.5
Élevée
|
7 mai 2026 |
| CVE-2026-41002 |
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git…
|
7.4
Élevée
|
7 mai 2026 |
| CVE-2026-41004 |
When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs
|
4.4
Moyenne
|
7 mai 2026 |
| CVE-2026-40982 |
Spring Cloud Config allows applications to serve arbitrary text and binary files through the…
|
9.1
Critique
|
7 mai 2026 |
| CVE-2025-22232 |
Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to…
|
5.3
Moyenne
|
10 avr. 2025 |
| CVE-2019-3799 |
Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6,…
|
Non notée
|
6 mai 2019 |