org.springframework.cloud:spring-cloud-config-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41004Mediumorg.springframework.cloud:spring-cloud-config-server: Spring Cloud Config Server Logged Sensitive Information CVE-2026-40982Criticalorg.springframework.cloud:spring-cloud-config-server: Spring Cloud Config vulnerable to Path Traversal CVE-2026-40981Highorg.springframework.cloud:spring-cloud-config-server: Spring Cloud Config has an Authorization Bypass Through User-Controlled Key CVE-2026-41002Highorg.springframework.cloud:spring-cloud-config-server: Spring Cloud Config Server Susceptible To TOCTOU Attack CVE-2026-22739Highorg.springframework.cloud:spring-cloud-config-server: Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access CVE-2020-5410Highorg.springframework.cloud:spring-cloud-config-server: Directory traversal attack in Spring Cloud Config CVE-2020-5405Mediumorg.springframework.cloud:spring-cloud-config-server: Directory traversal attack in Spring Cloud Config CVE-2019-3799Mediumorg.springframework.cloud:spring-cloud-config-server: Path Traversal in Spring Cloud Config

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo