CVE-2022-22979 — CVSS 7.5 (high): In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup…
CVE-2026-40989 — CVSS 5.7 (medium): Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud…
CVE-2026-40990 — CVSS 5.7 (medium): OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions…
CVE-2026-59300 — CVSS 3.1 (low): Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4…
CVE-2026-59301 — CVSS 3.1 (low): Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 -…
CVE-2026-59302 — CVSS 3.1 (low): Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring…
CVE-2026-59297 — CVSS 3.1 (low): Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3…
CVE-2026-59298 — CVSS 3.1 (low): Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0…
CVE-2026-59299 — CVSS 3.1 (low): Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…
CVE-2026-59291 — CVSS 2.0 (low): Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…