Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-59291 EUVD-2026-67179GHSA-6mg8-cpx2-hrff

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by vmware

Vendor: Spring Product: Spring Cloud Function

Description

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function.
Spring Cloud Function 5.0.0 - 5.0.3
Spring Cloud Function 4.3.0 - 4.3.4
Spring Cloud Function 4.2.0 - 4.2.7

Affected products

VendorProductAffectedFixed
Spring Spring Cloud Function 5.0.0 – ≤ 5.0.3, 4.3.0 – ≤ 4.3.4, 4.2.0 – ≤ 4.2.7 —

Advisories 1

References