SC
Product
Spring Cloud Config
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Spring Cloud Config to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59315 | 5.3 | Aug 27 | Spring Cloud Config Monitor Denial of Service Affected: 5.0.0 through 5.0.4; 4.3.0 through 4.3.4; 4.0.0 through 4.2.8; through 3.1.14 |
| CVE-2025-22232 | 5.3 | Apr 10 | Spring Cloud Config Server May Not Use Vault Token Sent By Clients Affected: 4.2.x before 4.2.2; 4.1.x before 4.1.6; 4.0.x before 4.0.10; 3.1.x before 3.1.10; 3.0.x before 4.1.6; 2.2.x before 4.1.6 |
| CVE-2026-41004 | 4.4 | May 7 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
Showing 3