Spring Cloud Function (Spring) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-27. Vendor: Spring.
CVEs of Spring Cloud Function
- CVE-2026-59301 - CVSS 4.9 (medium), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
- CVE-2026-59300 - CVSS 3.5 (low), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
- CVE-2026-59299 - CVSS 3.5 (low), 2026-08-27: Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4…
- CVE-2026-59298 - CVSS 3.5 (low), 2026-08-27: Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…
- CVE-2026-59297 - CVSS 3.5 (low), 2026-08-27: Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…
- CVE-2026-59291 - CVSS 5.5 (medium), 2026-08-27: Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…
- CVE-2026-40990 - CVSS 6.5 (medium), 2026-06-01: OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function…
- CVE-2026-40989 - CVSS 6.5 (medium), 2026-06-01: Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x:…
