cbcvebase.

Spring Cloud Function vulnerabilities

8 known vulnerabilities affecting spring/spring_cloud_function.

Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM4LOW4

Vulnerabilities

Page 1 of 1
CVE-2026-40990P3MEDIUMCVSS 6.5≥ 3.2.0, < 3.2.16≥ 4.1.0, < 4.1.10+3 more2026-06-01
CVE-2026-40990 [MEDIUM] CWE-770 CVE-2026-40990: OOM error is possible while attempting to add infinite amount of functions to Function Registry. Af OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 S
nvd
CVE-2026-40989P3MEDIUMCVSS 6.5≥ 3.2.0, < 3.2.16≥ 4.1.0, < 4.1.10+3 more2026-06-01
CVE-2026-40989 [MEDIUM] CWE-674 CVE-2026-40989: Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Sprin Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud
nvd
CVE-2026-59291P4MEDIUMCVSS 5.5≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+1 more2026-08-27
CVE-2026-59291 [MEDIUM] CWE-918 CVE-2026-59291: Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
nvd
CVE-2026-59301P4MEDIUMCVSS 4.9≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+1 more2026-08-27
CVE-2026-59301 [MEDIUM] CWE-532 CVE-2026-59301: Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5 Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
nvd
CVE-2026-59300P4LOWCVSS 3.5≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+2 more2026-08-27
CVE-2026-59300 [LOW] CWE-532 CVE-2026-59300: Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0 Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier
nvd
CVE-2026-59299P4LOWCVSS 3.5≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+2 more2026-08-27
CVE-2026-59299 [LOW] CWE-471 CVE-2026-59299: Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Funct Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier
nvd
CVE-2026-59298P4LOWCVSS 3.5≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+2 more2026-08-27
CVE-2026-59298 [LOW] CWE-20 CVE-2026-59298: Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0 Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier
nvd
CVE-2026-59297P4LOWCVSS 3.5≥ 5.0.0, ≤ 5.0.3≥ 4.3.0, ≤ 4.3.4+1 more2026-08-27
CVE-2026-59297 [LOW] CWE-346 CVE-2026-59297: Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
nvd
Spring Cloud Function vulnerabilities | cvebase