pkg:Maven/org.springframework.cloud:spring-cloud-config-server

All known vulnerabilities

• HIGH7.5CVE-2020-5410⚠ KEVDirectory traversal attack in Spring Cloud Config
  >= 2.1.0, < 2.1.9
• CRITICAL9.1CVE-2026-40982Spring Cloud Config vulnerable to Path Traversal
  >= 3.1.0, <= 3.1.13
• HIGH8.6Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access
  >= 4.3.0, < 4.3.2
• HIGH7.5Spring Cloud Config has an Authorization Bypass Through User-Controlled Key
  >= 3.1.0, <= 3.1.13
• HIGH7.2Spring Cloud Config Server Susceptible To TOCTOU Attack
  >= 3.1.0, <= 3.1.13
• MEDIUM6.5Directory traversal attack in Spring Cloud Config
  >= 2.1.0, < 2.1.7
• MEDIUM6.5Path Traversal in Spring Cloud Config
  from 0, < 1.4.6
• MEDIUM4.4Spring Cloud Config Server Logged Sensitive Information
  >= 3.1.0, <= 3.1.13