Cloud

Spring Cloud Config5.0.4.1

Spring Cloud Config provides server-side and client-side support for externalized configuration in a distributed system.

Changelog

Security

  • CVE-2026-47836 — Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN
  • CVE-2026-47837 — Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
  • CVE-2026-47894 — Spring Cloud Config Server Native Environment Repository Exposure
  • CVE-2026-59315 — Spring Cloud Config Monitor Denial of Service

Released from tag v5.0.4.1.

Get Started with Tanzu Spring today