Spring Cloud Function (Vmware) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 123 known versions, newest CVE from 2026-08-27. Vendor: Vmware.
CVEs of Spring Cloud Function
- CVE-2026-59302 - CVSS 4.9 (medium), 2026-08-27: Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 -…
- CVE-2026-59301 - CVSS 4.9 (medium), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
- CVE-2026-59300 - CVSS 3.5 (low), 2026-08-27: Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud…
- CVE-2026-59299 - CVSS 3.5 (low), 2026-08-27: Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4…
- CVE-2026-59298 - CVSS 3.5 (low), 2026-08-27: Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…
- CVE-2026-59297 - CVSS 3.5 (low), 2026-08-27: Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…
- CVE-2026-59291 - CVSS 5.5 (medium), 2026-08-27: Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring…
- CVE-2026-40990 - CVSS 6.5 (medium), 2026-06-01: OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function…
- CVE-2026-40989 - CVSS 6.5 (medium), 2026-06-01: Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x:…
- CVE-2024-22271 - CVSS 8.2 (high), 2024-07-09: In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to…
- CVE-2022-22979 - CVSS 7.5 (high), 2022-06-21: In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a…
- CVE-2022-22963 - CVSS 9.8 (critical), 2022-04-01: In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a…
