SC
Product
Spring Cloud Stream
4
CVEs
0
On KEV
3.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 4
Watch
Add Spring Cloud Stream to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59306 | 3.8 | Aug 27 | Potential for deserialization of untrusted types in Spring Cloud Stream Affected: 4.2.0 before 4.2.7; 4.3.0 before 4.3.4; 5.0.0 before 5.0.3 |
| CVE-2026-59305 | 3.8 | Aug 27 | Partition interceptor may be improperly added while sending message Affected: 4.2.0 before 4.2.7; 4.3.0 before 4.3.4; 5.0.0 before 5.0.3 |
| CVE-2026-59304 | 3.8 | Aug 27 | Improper caching of the original content type in Spring Cloud Stream Avro Affected: 4.2.0 before 4.2.7; 4.3.0 before 4.3.4; 5.0.0 before 5.0.3 |
| CVE-2026-59303 | 3.8 | Aug 27 | Dynamic destination cache size is not properly bound in Spring Cloud Stream Affected: 4.2.0 before 4.2.7; 4.3.0 before 4.3.4; 5.0.0 before 5.0.3 |
Showing 4
