CVE-2026-59305 Partition interceptor may be improperly added while sending message

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67190

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304

Spring Cloud Stream Avro is affected by an improper caching of the original content type, leading to potential confidentiality and integrity impact at a low severity (CVSS 3.1). The affected versions are Spring Cloud Stream 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The CVSS vector (AV:N/AC:H/...

EUVD-2026-67189

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59303

Spring Cloud Stream contains a vulnerability where the dynamic destination cache size is not properly bounded, affecting versions 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The flaw allows an unbounded cache to grow, which could lead to resource exhaustion under specific conditions. The CVSS 3...

CVE-2026-59303 Dynamic destination cache size is not properly bound in Spring Cloud Stream

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67188

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302

CVE-2026-59302 affects Spring Cloud Stream versions 5.0.0–5.0.2, 4.3.0–4.3.3, and 4.2.0–4.2.6, where the logging functionality may record sensitive data. The CVSS 3.1 base score is 3.1 (LOW) , with a network attack vector, high attack complexity, high privileges required, and user interaction req...

EUVD-2026-67186

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59300 Potential for logging sensitive data in Spring Cloud Function AWS

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59301

Spring Cloud Function Azure is susceptible to a sensitive data logging issue, where potentially sensitive information may be written to logs. The vulnerability affects Spring Cloud Function versions 5.0.0–5.0.3, 4.3.0–4.3.4, and 4.2.0–4.2.7. The CNA-assigned CVSS 3.1 score is 3.1 (LOW) , reflecti...

EUVD-2026-67187

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59301 Potential for logging sensitive data in Spring Cloud Function Azure

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59300

Spring Cloud Function AWS is affected by a vulnerability where sensitive data may be logged . The issue affects versions 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier . The CVSS 3.1 score is 3.1 (Low) , with a vector requiring network access, high attack complexity, high privil...

EUVD-2026-67185

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59299 Composition lookup can potentially poison base function in Spring Cloud Function

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59299

CVE-2026-59299 affects Spring Cloud Function (versions 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier ). The vulnerability involves a composition lookup that can potentially poison the base function , leading to low impact on both confidentiality and integrity. The CVSS 3.1 base...

EUVD-2026-67184

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...