Security
فارسی
All products

org.springframework.cloud:spring-cloud-config-server

Maven · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Cloud Config Server Logged Sensitive InformationCVE-2026-41004 · GHSA-J6HH-H3CF-C2HF org.springframework.cloud:spring-cloud-config-serverRed Hat Enterprise Linux 8/log4j:2/log4j MavenRed Hat Medium Fix reported
Spring Cloud Config Server Susceptible To TOCTOU AttackCVE-2026-41002 · GHSA-86WQ-234Q-R6WG org.springframework.cloud:spring-cloud-config-server Maven High Fix reported
Spring Cloud Config vulnerable to Path TraversalCVE-2026-40982 · GHSA-6G23-24MC-HX6X org.springframework.cloud:spring-cloud-config-server Maven Critical Fix reported
Spring Cloud Config has an Authorization Bypass Through User-Controlled Key CVE-2026-40981 · GHSA-2MH5-3CW6-HRRQ org.springframework.cloud:spring-cloud-config-server Maven High Fix reported
Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File AccessCVE-2026-22739 · GHSA-3QWQ-Q9VM-5J42 org.springframework.cloud:spring-cloud-config-server Maven High Fix reported
Directory traversal attack in Spring Cloud ConfigCVE-2020-5410 · GHSA-32XF-JWMV-9HF3 org.springframework.cloud:spring-cloud-config-server Maven High Fix reported
Directory traversal attack in Spring Cloud ConfigCVE-2020-5405 · GHSA-G86W-V5VG-9GXF org.springframework.cloud:spring-cloud-config-server Maven Medium Fix reported
Path Traversal in Spring Cloud ConfigCVE-2019-3799 · GHSA-4X49-W62V-76Q7 org.springframework.cloud:spring-cloud-config-serverRed Hat Fuse 7/spring-cloud-config-server MavenRed Hat Medium Fix reported