Advisories · Technology

Spring Cloud Gateway.

Every CVE that names Spring Cloud Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47879 CVE record

CVSS 7.7 High

Spring Cloud Gateway SSRF and native file access with gRPC
- Spring Cloud Gateway
- Server-side request forgery (SSRF)
Not analysed yet 27 Aug 2026
CVE-2026-47825 CVE record

CVSS 8.6 High

Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations
- Spring Cloud Gateway
- CWE-346
Not analysed yet 15 Jun 2026
CVE-2022-22946 CVE record

Spring Cloud Gateway: In spring cloud gateway versions prior to 3.1.1+…
- Spring Cloud Gateway
Not analysed yet 4 Mar 2022