Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Missing Authentication for Critical FunctionCVE-2026-47837
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Directory TraversalCVE-2026-41002
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.3)[5.0.0-M1,5.0.3)
Has fix
MavenPublished 7 May 2026
  • H
Directory TraversalCVE-2026-40982
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.3)[5.0.0-M1,5.0.3)
Has fix
MavenPublished 7 May 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-41004
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.3)[5.0.0-M1,5.0.3)
Has fix
MavenPublished 7 May 2026
  • M
Empty Password in Configuration FileCVE-2026-40981
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.3)[5.0.0-M1,5.0.3)
Has fix
MavenPublished 7 May 2026
  • H
Directory TraversalCVE-2026-22739
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,4.3.2)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 24 Mar 2026
  • M
Improper AuthorizationCVE-2025-22232
Affects org.springframework.cloud:spring-cloud-config-server | Versions [2.2.0,3.1.10)[4.0.0,4.1.6)[4.2.0,4.2.2)
Has fix
MavenPublished 9 Apr 2025
  • H
Directory TraversalCVE-2020-5410
Affects org.springframework.cloud:spring-cloud-config-server | Versions [2.1.0, 2.1.9)[2.2.0, 2.2.3)
Has fix
MavenPublished 2 Jun 2020
  • H
Directory TraversalCVE-2020-5405
Affects org.springframework.cloud:spring-cloud-config-server | Versions [2.2.0.RELEASE, 2.2.2.RELEASE)[2.1.0.RELEASE, 2.1.7.RELEASE)
Has fix
MavenPublished 6 Mar 2020
  • H
Directory TraversalCVE-2019-3799
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,1.4.6.RELEASE)[2.0.0.RELEASE,2.0.4.RELEASE)[2.1.0.RELEASE,2.1.2.RELEASE)
Has fix
MavenPublished 17 Apr 2019
  • H
Missing AuthorizationCVE-2026-59284
Affects org.springframework.cloud:spring-cloud-context | Versions [,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
Creation of Temporary File With Insecure PermissionsCVE-2024-22236
Affects org.springframework.cloud:spring-cloud-contract-shade | Versions [,3.1.10)[4.0.0,4.0.5)[4.1.0,4.1.1)
Has fix
MavenPublished 1 Feb 2024
  • M
SQL InjectionCVE-2020-5427
Affects org.springframework.cloud:spring-cloud-dataflow-server-core | Versions [2.6.0,2.6.5)[0,2.5.4.RELEASE)
Has fix
MavenPublished 26 Jan 2021
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59300
Affects org.springframework.cloud:spring-cloud-function-adapter-aws | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59301
Affects org.springframework.cloud:spring-cloud-function-adapter-azure | Versions [4.2.0,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-59299
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-59291
Affects org.springframework.cloud:spring-cloud-function-context | Versions [4.2.0, 5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40989
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,4.3.3)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 10 May 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40990
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,4.3.3)[5.0.0-M1, 5.0.2)
Has fix
MavenPublished 10 May 2026
  • H
Denial of Service (DoS)CVE-2024-22271
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,4.1.2)
Has fix
MavenPublished 20 Jun 2024
  • M
Denial of Service (DoS)CVE-2022-22979
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,3.2.6)
Has fix
MavenPublished 16 Jun 2022
  • C
Remote Code Execution (RCE)CVE-2022-22963
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,3.1.7)[3.2.0,3.2.3)
Has fix
MavenPublished 30 Mar 2022
  • L
Improper Certificate ValidationCVE-2026-59297
Affects org.springframework.cloud:spring-cloud-function-serverless-web | Versions [4.2.0,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
HTTP Response SplittingCVE-2026-59298
Affects org.springframework.cloud:spring-cloud-function-web | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Certificate ValidationCVE-2022-22946
Affects org.springframework.cloud:spring-cloud-gateway | Versions [3.1.0,3.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Use of Less Trusted SourceCVE-2026-47825
Affects org.springframework.cloud:spring-cloud-gateway | Versions [,4.3.5)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 27 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-47879
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • H
Always-Incorrect Control Flow ImplementationCVE-2026-22750
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [4.2.0,4.2.1)
Has fix
MavenPublished 10 Apr 2026
  • H
Expression Language InjectionCVE-2025-41253
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,4.2.6)[4.3.0,4.3.2)
Has fix
MavenPublished 16 Oct 2025
  • C
Expression Language InjectionCVE-2025-41243
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,4.2.5)[4.3.0,4.3.1)
Has fix
MavenPublished 10 Sept 2025