Skip to content
OpenAdvisories

Product · Spring

Spring Cloud Function

8 known vulnerabilities.

All Critical High Medium Low Exploited only

8 results · Feed

  • Low 3.1
    CVE-2026-59301

    Potential for logging sensitive data in Spring Cloud Function Azure

    Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7

    Spring Spring Cloud Function
  • Low 3.1
    CVE-2026-59300

    Potential for logging sensitive data in Spring Cloud Function AWS

    Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

    Spring Spring Cloud Function
  • Low 3.1
    CVE-2026-59299

    Composition lookup can potentially poison base function in Spring Cloud Function

    Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

    Spring Spring Cloud Function
  • Low 3.1
    CVE-2026-59298

    Potential for improper filtering of HTTP headers in Spring Cloud Function

    Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

    Spring Spring Cloud Function
  • Low 3.1
    CVE-2026-59297

    Spring Cloud Function can incorrectly determine if URI is secure

    Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7

    Spring Spring Cloud Function
  • Low 2.0
    CVE-2026-59291

    Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

    Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7

    Spring Spring Cloud Function
  • Medium 5.7
    CVE-2026-40990

    Unbounded cache for function definitions

    OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Fu…

    Spring Spring Cloud Function org.springframework.cloud:spring-cloud-function-context Maven
  • Medium 5.7
    CVE-2026-40989

    Self Routing guard bypassed via function composition

    Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x…

    Spring Spring Cloud Function org.springframework.cloud:spring-cloud-function-context Maven