spring Spring Cloud Config Vulnerabilities

Spring Spring Cloud Config vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

7 May 2026

Remote Code Execution Vulnerability in Spring Cloud Config by Google
CVE-2026-40981
SpringSpring Cloud Config7.5HIGH
TOCTOU Vulnerability in Spring Cloud Config Server by VMware
CVE-2026-41002
SpringSpring Cloud Config7.4HIGH
Sensitive Information Exposure in Spring Cloud Config Server
CVE-2026-41004
SpringSpring Cloud Config4.4MEDIUM
Directory Traversal Vulnerability in Spring Cloud Config by Pivotal
CVE-2026-40982
SpringSpring Cloud Config9.1CRITICAL

10 April 2025

Vulnerability in Spring Cloud Config Server Affects Token Management
CVE-2025-22232
SpringSpring Cloud Config5.3MEDIUM

2 June 2020

Directory Traversal with spring-cloud-config-server
CVE-2020-5410
Spring By VmwareSpring Cloud Config👾🟡EPSS 94%🦅7.5HIGH

5 March 2020

Directory Traversal with spring-cloud-config-server
CVE-2020-5405
Spring By VmwareSpring Cloud ConfigEPSS 87%6.5MEDIUM

6 May 2019

Directory Traversal with spring-cloud-config-server
CVE-2019-3799
SpringSpring Cloud Config👾🟡EPSS 91%6.5MEDIUM