org.springframework.cloud:spring-cloud-config-server vulnerabilities (Root)

4 vulnerabilities.

• org.springframework.cloud:spring-cloud-config-server Root Spring Cloud Config has an Authorization Bypass Through User-Controlled Key CVE-2026-40981 Fix available 7.5 HighMay 7, 2026
• org.springframework.cloud:spring-cloud-config-server Root Spring Cloud Config Server Susceptible To TOCTOU Attack CVE-2026-41002 Fix available 7.4 HighMay 7, 2026
• org.springframework.cloud:spring-cloud-config-server Root Spring Cloud Config vulnerable to Path Traversal CVE-2026-40982 Public exploitFix available 9.1 CriticalMay 7, 2026
• org.springframework.cloud:spring-cloud-config-server Root Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks CVE-2026-22739 Fix available 8.6 HighMarch 24, 2026