https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:13:32.962785+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02830 bdu:2022-02830 2026-10-02T17:13:32.982772+00:00 bdu:2022-02830 https://cve.radiocsirt.org/vuln/cnvd-2019-14266 cnvd-2019-14266 2026-10-02T17:13:32.982807+00:00 cnvd-2019-14266 https://cve.radiocsirt.org/vuln/euvd-2026-177685 EUVD-2026-177685 2026-10-02T17:13:32.982821+00:00 EUVD-2026-177685 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3799 fkie_cve-2019-3799 2026-10-02T17:13:32.982832+00:00

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

 https://cve.radiocsirt.org/vuln/ghsa-4x49-w62v-76q7 GHSA-4x49-w62v-76q7 — Path Traversal in Spring Cloud Config 2026-10-02T17:13:32.982860+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-config-server

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

 https://cve.radiocsirt.org/vuln/gsd-2019-3799 gsd-2019-3799 2026-10-02T17:13:32.982885+00:00 gsd-2019-3799