PatchTheCVEspring cloud commons vulnerabilities and fixes
Recent CVEs affecting spring cloud commons, with upgrade or downgrade steps. 1 tracked.
Also searched as: springcloudcommons.
spring cloud commons has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-08-27. Highest priority: CVE-2026-59284 (score 36/100).
- CVE-2026-59284 HIGH 7.6 UPGRADE There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring C
FAQ
How do I fix spring cloud commons vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is spring cloud commons being exploited right now?
None of the tracked spring cloud commons CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which spring cloud commons CVE should I patch first?
CVE-2026-59284 currently ranks highest (36/100): There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring C.