Skip to content
OpenAdvisories

Package · Maven

org.springframework.cloud:spring-cloud-gateway

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-22750

    SSL bundle configuration silently bypassed in Spring Cloud Gateway

    When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead. Note: The 4.2.x branch is no longer under open source suppor…

    VMware Spring Cloud Gateway org.springframework.cloud:spring-cloud-gateway Maven
  • Critical 10.0
    CVE-2022-22947 Exploited Public exploit EPSS 98%

    Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

    org.springframework.cloud:spring-cloud-gateway Maven
    KEV May 16, 2022
  • Medium 6.5
    CVE-2021-22051

    Request injection in Spring Cloud Gateway

    Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x user…

    org.springframework.cloud:spring-cloud-gateway Maven