SC
Product
Spring Cloud Function
8
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 4
Watch
Add Spring Cloud Function to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40990 | 6.5 | Jun 1 | Unbounded cache for function definitions Affected: 3.2.0 before 3.2.16; 4.1.0 before 4.1.10; 4.2.0 before 4.2.6; 4.3.0 before 4.3.3; 5.0.0 before 5.0.2 |
| CVE-2026-40989 | 6.5 | Jun 1 | Self Routing guard bypassed via function composition Affected: 3.2.0 before 3.2.16; 4.1.0 before 4.1.10; 4.2.0 before 4.2.6; 4.3.0 before 4.3.3; 5.0.0 before 5.0.2 |
| CVE-2026-59291 | 5.5 | Aug 27 | Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7 |
| CVE-2026-59301 | 4.9 | Aug 27 | Potential for logging sensitive data in Spring Cloud Function Azure Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7 |
| CVE-2026-59300 | 3.5 | Aug 27 | Potential for logging sensitive data in Spring Cloud Function AWS Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7; through 3.2.16 |
| CVE-2026-59299 | 3.5 | Aug 27 | Composition lookup can potentially poison base function in Spring Cloud Function Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7; through 3.2.16 |
| CVE-2026-59298 | 3.5 | Aug 27 | Potential for improper filtering of HTTP headers in Spring Cloud Function Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7; through 3.2.16 |
| CVE-2026-59297 | 3.5 | Aug 27 | Spring Cloud Function can incorrectly determine if URI is secure Affected: 5.0.0 through 5.0.3; 4.3.0 through 4.3.4; 4.2.0 through 4.2.7 |
Showing 8