CVE-2026-47894

Spring Cloud Config Server is affected by a vulnerability in its native environment repository that allows exposure of configuration files outside the configured repository path. The issue affects versions 5.0.0–5.0.4 , 4.3.0–4.3.4 , 4.0.0–4.2.8 , and 3.1.14 and earlier . Per the CVSS 3.1 score o...