SC
Product
Spring Cloud Function
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 4
Watch
Add Spring Cloud Function to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59300 | 3.5 | Aug 27 | Potential for logging sensitive data in Spring Cloud Function AWS Affected: 3.2.0 before 3.2.17; 4.2.0 before 4.2.8; 4.3.0 before 4.3.5; 5.0.0 before 5.0.4 |
| CVE-2026-59299 | 3.5 | Aug 27 | Composition lookup can potentially poison base function in Spring Cloud Function Affected: 3.2.0 before 3.2.17; 4.2.0 before 4.2.8; 4.3.0 before 4.3.5; 5.0.0 before 5.0.4 |
| CVE-2026-59298 | 3.5 | Aug 27 | Potential for improper filtering of HTTP headers in Spring Cloud Function Affected: 3.2.0 before 3.2.17; 4.2.0 before 4.2.8; 4.3.0 before 4.3.5; 5.0.0 before 5.0.4 |
| CVE-2026-59297 | 3.5 | Aug 27 | Spring Cloud Function can incorrectly determine if URI is secure Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.5; 5.0.0 before 5.0.4 |
Showing 4