Spring Cloud Function vulnerabilities
2 known vulnerabilities affecting spring/spring_cloud_function.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-40990P3MEDIUMCVSS 6.5≥ 3.2.0, < 3.2.16≥ 4.1.0, < 4.1.10+3 more2026-06-01
CVE-2026-40990 [MEDIUM] CWE-770 CVE-2026-40990: OOM error is possible while attempting to add infinite amount of functions to Function Registry. Af
OOM error is possible while attempting to add infinite amount of functions to Function Registry.
Affected Spring Products and Versions:
Spring Cloud Function 3.2.x: versions prior to 3.2.16
Spring Cloud Function 4.1.x: versions prior to 4.1.10
Spring Cloud Function 4.2.x: versions prior to 4.2.6
Spring Cloud Function 4.3.x: versions prior to 4.3.3
S
nvd
CVE-2026-40989P3MEDIUMCVSS 6.5≥ 3.2.0, < 3.2.16≥ 4.1.0, < 4.1.10+3 more2026-06-01
CVE-2026-40989 [MEDIUM] CWE-674 CVE-2026-40989: Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Sprin
Under infinite recursion in the routing layer, request-handling can cause OOM error.
Affected Spring Products and Versions:
Spring Cloud Function 3.2.x: versions prior to 3.2.16
Spring Cloud Function 4.1.x: versions prior to 4.1.10
Spring Cloud Function 4.2.x: versions prior to 4.2.6
Spring Cloud Function 4.3.x: versions prior to 4.3.3
Spring Cloud
nvd