Known vulnerabilities in Spring Cloud Gateway
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-47879 | Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto… | 7.7 High | Aug 27, 2026 |
| CVE-2026-47825 | Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain… | 8.6 High | Jun 15, 2026 |