How many CVEs does spring-cloud spring-cloud-gateway have?

spring-cloud spring-cloud-gateway has 4 published CVE records since 2021.

How many spring-cloud spring-cloud-gateway CVEs are in CISA KEV?

Yes — 1 of spring-cloud spring-cloud-gateway's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for spring-cloud spring-cloud-gateway vulnerabilities?

Yes — 1 of spring-cloud spring-cloud-gateway's CVEs have a known public exploit.

Which versions of spring-cloud spring-cloud-gateway are affected?

61 distinct spring-cloud spring-cloud-gateway versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in spring-cloud spring-cloud-gateway CVEs?

spring-cloud spring-cloud-gateway's CVEs most often map to these CWE weakness types: CWE-15 (External Control of System or Configuration Setting), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical spring-cloud spring-cloud-gateway vulnerabilities are there?

spring-cloud spring-cloud-gateway has 1 critical and 1 high-severity CVEs.

What is the average severity of spring-cloud spring-cloud-gateway CVEs?

The average CVSS base score across spring-cloud spring-cloud-gateway's scored CVEs is 7.4.

spring-cloud spring-cloud-gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every spring-cloud spring-cloud-gateway version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

3.0.03 CVEs
3.0.13 CVEs
3.0.23 CVEs
3.0.33 CVEs
2.0.0.M12 CVEs
2.0.0.M22 CVEs
2.0.0.M32 CVEs
2.0.0.M42 CVEs
2.0.0.M52 CVEs
2.0.0.M62 CVEs
2.0.0.M72 CVEs
2.0.0.M82 CVEs
2.0.0.M92 CVEs
2.0.0.RC12 CVEs
2.0.0.RC22 CVEs
2.0.0.RELEASE2 CVEs
2.0.1.RELEASE2 CVEs
2.1.0.M12 CVEs
2.1.0.M22 CVEs
2.1.0.M32 CVEs
2.1.0.RC12 CVEs
2.1.0.RC22 CVEs
2.1.0.RC32 CVEs
2.1.0.RELEASE2 CVEs
2.1.1.RELEASE2 CVEs
2.2.0.M22 CVEs
2.2.0.M32 CVEs
2.2.0.RC12 CVEs
2.2.0.RC22 CVEs
2.2.0.RELEASE2 CVEs
2.2.1.RELEASE2 CVEs
3.0.0-M22 CVEs
3.0.0-M32 CVEs
3.0.0-M42 CVEs
3.0.0-M52 CVEs
3.0.0-M62 CVEs
3.0.0-RC12 CVEs
3.0.0.M12 CVEs
3.0.42 CVEs
3.1.02 CVEs
3.1.0-M12 CVEs
3.1.0-M22 CVEs
3.1.0-M32 CVEs
3.0.51 CVE
3.0.61 CVE
4.2.01 CVE

Version ranges

<= 11.3.22 CVEs
<= 22.1.12 CVEs
<= 22.1.22 CVEs
<= 22.1.32 CVEs
<= 22.2.02 CVEs
< 2.2.101 CVE
<= 1.10.01 CVE
<= 1.11.01 CVE
<= 1.15.01 CVE
<= 1.15.11 CVE
<= 1.8.01 CVE
<= 22.1.01 CVE

Fixed in

2.2.101 CVE
2b4b39598dbbb7baa8426a283050a5b9490bb28b1 CVE
3e68ef129b8d865e058120262e930f7dd025f2371 CVE

Find a version

4 CVEs

Sort

SSL bundle configuration silently bypassed in Spring Cloud Gateway
CVE-2026-22750
Patch
CWE-15
High · CVSS 7.5
EPSS 0.2% (12th pct)2026-04-10
Medium vulnerability · 2022-03-04
CVE-2022-22946
Medium · CVSS 5.5
EPSS 4.8% (91th pct)2022-03-04
Critical vulnerability · 2022-03-03
CVE-2022-22947
CISA KEV
Public exploit
Patch
CWE-94
Added to CISA KEV 2022-05-16
Critical · CVSS 10.0
EPSS 98.3% (100th pct)2022-03-03
Medium vulnerability · 2021-11-08
CVE-2021-22051
Patch
Medium · CVSS 6.5
EPSS 0.7% (48th pct)2021-11-08

spring-cloud spring-cloud-gateway Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other spring-cloud products

Frequently asked questions

References

Track spring-cloud spring-cloud-gateway vulnerabilities