Vmware Spring Cloud Function — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Spring Cloud Function, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-22963 — CVSS 9.8 (critical) — actively exploited: In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user…
• CVE-2022-22979 — CVSS 7.5 (high): In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup…
• CVE-2026-40989 — CVSS 5.7 (medium): Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud…
• CVE-2026-40990 — CVSS 5.7 (medium): OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions…