Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2025-41235
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,3.1.10)[4.0.0,4.1.8)[4.2.0,4.2.3)
Has fix
MavenPublished 30 May 2025
  • C
Arbitrary Code InjectionCVE-2022-22947
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,3.0.7)[3.1.0,3.1.1)
Has fix
MavenPublished 4 Mar 2022
  • H
HTTP Request SmugglingCVE-2021-22051
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [3.0.0,3.0.5)[,2.2.10.RELEASE)
Has fix
MavenPublished 5 Nov 2021
  • H
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2025-41235
Affects org.springframework.cloud:spring-cloud-gateway-server-mvc | Versions [,4.1.8)[4.2.0,4.2.3)
Has fix
MavenPublished 30 May 2025
  • H
Arbitrary Code ExecutionCVE-2021-22053
Affects org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard | Versions [,2.2.10.RELEASE)
Has fix
MavenPublished 18 Nov 2021
  • M
Unintended Proxy or IntermediaryCVE-2020-5412
Affects org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard | Versions [,2.1.6.RELEASE)[2.2.0.RELEASE,2.2.4.RELEASE)
Has fix
MavenPublished 5 Aug 2020
  • M
Improper Access ControlCVE-2021-22113
Affects org.springframework.cloud:spring-cloud-netflix-zuul | Versions [,2.2.7.RELEASE)
Has fix
MavenPublished 12 Feb 2021
  • H
Improper Restriction of Communication Channel to Intended EndpointsCVE-2021-22044
Affects org.springframework.cloud:spring-cloud-openfeign-core | Versions [3.0.0,3.0.5)[,2.2.10)
Has fix
MavenPublished 27 Oct 2021
  • L
Remote Code Execution (RCE)CVE-2024-37084
Affects org.springframework.cloud:spring-cloud-skipper-server-core | Versions [2.11.0, 2.11.4)
Has fix
MavenPublished 25 Jul 2024
  • M
Arbitrary File UploadCVE-2024-22263
Affects org.springframework.cloud:spring-cloud-skipper-server-core | Versions [,2.11.3)
Has fix
MavenPublished 29 May 2024
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41708
Affects org.springframework.cloud:spring-cloud-sleuth-instrumentation | Versions [3.1.0,]
Has fix
MavenPublished 12 Jun 2026
  • L
Deserialization of Untrusted DataCVE-2026-59306
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Incorrect AuthorizationCVE-2026-59305
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59302
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Allocation of Resources Without Limits or ThrottlingCVE-2026-59303
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-client | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-core | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-server | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
SQL InjectionCVE-2020-5428
Affects org.springframework.cloud:spring-cloud-task-core | Versions [,2.2.5)
Has fix
MavenPublished 26 Jan 2021
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41716
Affects org.springframework.data:spring-data-commons | Versions [,3.5.12)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Denial of Service (DoS)CVE-2026-41711
Affects org.springframework.data:spring-data-commons | Versions [,3.5.12)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Denial of Service (DoS)CVE-2026-41695
Affects org.springframework.data:spring-data-commons | Versions [3.4.0,3.5.12)[4.0.0,4.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Denial of Service (DoS)CVE-2026-41721
Affects org.springframework.data:spring-data-commons | Versions [,3.5.12)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 10 Jun 2026
  • H
Denial of Service (DoS)CVE-2018-1274
Affects org.springframework.data:spring-data-commons | Versions [, 1.13.11.RELEASE)[2.0.0.RELEASE, 2.0.6.RELEASE)
Has fix
MavenPublished 26 Apr 2018
  • C
Arbitrary Code ExecutionCVE-2018-1273
Affects org.springframework.data:spring-data-commons | Versions [,1.13.11.RELEASE)[2.0.0.RELEASE,2.0.6.RELEASE)
Has fix
MavenPublished 16 Apr 2018
  • M
Creation of Temporary File in Directory with Insecure PermissionsCVE-2026-2817
Affects org.springframework.data:spring-data-geode | Versions [0,]
Has fix
MavenPublished 27 Feb 2026
  • M
Relative Path TraversalCVE-2026-2818
Affects org.springframework.data:spring-data-geode | Versions [0,]
Has fix
MavenPublished 27 Feb 2026
  • M
SQL InjectionCVE-2026-47834
Affects org.springframework.data:spring-data-jpa | Versions [3.0.0, 4.0.7)[4.1.0, 4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Information ExposureCVE-2019-3802
Affects org.springframework.data:spring-data-jpa | Versions [,1.11.22.RELEASE)[2.0.0.RELEASE, 2.1.8.RELEASE)
Has fix
MavenPublished 18 Jul 2019
  • L
Information ExposureCVE-2019-3797
Affects org.springframework.data:spring-data-jpa | Versions [2.0.0.RELEASE, 2.0.14.RELEASE)[2.1.0.RELEASE, 2.1.6.RELEASE)[, 1.11.20.RELEASE)
Has fix
MavenPublished 9 Apr 2019