Low · 3.1 CVE-2026-59304 EUVD-2026-67190GHSA-jjqx-2h5c-j956

Improper caching of the original content type in Spring Cloud Stream Avro

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by vmware

Vendor: Spring Product: Spring Cloud Stream

Description

Improper caching of the original content type in Spring Cloud Stream Avro.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6

Affected products

Vendor	Product	Affected	Fixed
Spring	Spring Cloud Stream	5.0.0 – ≤ 5.0.2, 4.3.0 – ≤ 4.3.3, 4.2.0 – ≤ 4.2.6	—

Advisories 1

WID-SEC-2026-2952 VMware Tanzu Spring Cloud: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 27, 2026

References

https://spring.io/security/cve-2026-59304