Spring Cloud Gateway

2 known vulnerabilities in Spring Cloud Gateway, 1 critical, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2022-22947 CVSS 10.0 critical · actively exploited VMware Spring Cloud Gateway Code Injection Vulnerability

Latest vulnerabilities

  • CVE-2026-47879 CVSS 8.7 high Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring…
  • CVE-2022-22947 CVSS 10.0 critical · actively exploited VMware Spring Cloud Gateway Code Injection Vulnerability