cbcvebase.

Spring Cloud Gateway vulnerabilities

2 known vulnerabilities affecting spring/spring_cloud_gateway.

Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2

Vulnerabilities

Page 1 of 1
CVE-2026-47879P3HIGHCVSS 8.7≥ 5.0.0, ≤ 5.0.2≥ 4.3.0, ≤ 4.3.5+2 more2026-08-27
CVE-2026-47879 [HIGH] CWE-918 CVE-2026-47879: Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for d Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier
nvd
CVE-2026-47825P3HIGHCVSS 8.6≥ 3.1.0, < 3.1.13≥ 4.1.0, < 4.1.13+3 more2026-06-15
CVE-2026-47825 [HIGH] CWE-346 CVE-2026-47825: Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxie Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x (fix 3.1.13). Spring Cloud Gateway 4.1.x (fix 4.1.13). Spring Cloud Gateway 4.2.x (fix 4.2.9). Spring Cloud Ga
nvd