Skip to content

Product

org.springframework.cloud/spring-cloud-contract-shade vulnerabilities

1 published CVE affecting org.springframework.cloud/spring-cloud-contract-shade, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.cloud/spring-cloud-contract-shade CVEs

Newest publication first

  1. CVE-2024-22236 Spring Cloud Contract vulnerable to local information disclosure

    Published
    MediumCVSS 5.5 EPSS 0.22%

    In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:gua...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.