SC
Product
Spring Cloud
by Spring · last CVE Mar 24, 2026
1
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Spring Cloud to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-22739
8.6
1%
Mar 24
Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
Affected: 3.1.x before 3.1.13; 4.1.x before 4.1.9; 4.2.x before 4.2.3; 4.3.x before 4.3.2; 5.0.x before 5.0.2
Showing 1