org.springframework.cloud:spring-cloud-function-context

4 results · Feed

• Medium 5.7
  CVE-2026-40990

  Unbounded cache for function definitions

  OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Fu…

  Spring Spring Cloud Function org.springframework.cloud:spring-cloud-function-context Maven
  Jun 1, 2026
• Medium 5.7
  CVE-2026-40989

  Self Routing guard bypassed via function composition

  Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x…

  Spring Spring Cloud Function org.springframework.cloud:spring-cloud-function-context Maven
  Jun 1, 2026
• High 8.2
  CVE-2024-22271

  Spring Cloud Function Web DOS Vulnerability

  In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the f…

  Spring by VMware Tanzu Spring Cloud Function Framework org.springframework.cloud:spring-cloud-function-context Maven
  Jul 9, 2024
• Critical 9.8
  CVE-2022-22963 Exploited Public exploit EPSS 100%

  Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

  In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local …

  org.springframework.cloud:spring-cloud-function-context Maven
  Apr 1, 2022

  KEV Aug 25, 2022