https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:14:19 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-04241 bdu:2026-04241 https://vulnerability.circl.lu/vuln/bdu:2026-04241 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0343 certfr-2026-avi-0343 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0343 https://vulnerability.circl.lu/vuln/fkie_cve-2026-22739 <p>Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.</p> <p>Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-22739 https://vulnerability.circl.lu/vuln/ghsa-3qwq-q9vm-5j42 <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-config-server</p> <p>Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.</p> <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-config-server</p> <p>Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.</p> https://vulnerability.circl.lu/vuln/ghsa-3qwq-q9vm-5j42 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0829 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0829