Filtered by vendor Spring Subscriptions
Filtered by product Spring Cloud Gateway Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-47825 2 Spring, Vmware 2 Spring Cloud Gateway, Spring Cloud Gateway 2026-10-01 8.6 High
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x (fix 3.1.13). Spring Cloud Gateway 4.1.x (fix 4.1.13). Spring Cloud Gateway 4.2.x (fix 4.2.9). Spring Cloud Gateway 4.3.x (fix 4.3.5). Spring Cloud Gateway 5.0.x (fix 5.0.2).
CVE-2026-47879 2 Spring, Vmware 2 Spring Cloud Gateway, Spring Cloud Gateway 2026-09-10 7.7 High
Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier