When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud

The base directory (spring.cloud.config.server.git.basedir) used by the Spring Cloud Config Server to clone Git repositories to

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config serve

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applicatio

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applicatio

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older un