PT-2026-82709

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59301: Insertion of Sensitive Information into Log File

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59299: Modification of Assumed-Immutable Data (MAID)

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59298: Improper Input Validation

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59297: Origin Validation Error

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59291: Server-Side Request Forgery (SSRF)

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

PT-2026-82701

Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 5.0.0 through 5.0.3 Spring Cloud Function versions 4.3.0 through 4.3.4 Spring Cloud Function versions 4.2.0 through 4.2.7 Description An issue exists that may allow arbitrary file read and Server-Side Request...

PT-2026-82708

Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 5.0.0 through 5.0.3 Spring Cloud Function versions 4.3.0 through 4.3.4 Spring Cloud Function versions 4.2.0 through 4.2.7 Spring Cloud Function versions 3.2.16 and earlier Description Spring Cloud Function AWS...

CVE-2026-59300: Insertion of Sensitive Information into Log File

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

PT-2026-82707

Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 5.0.0 through 5.0.3 Spring Cloud Function versions 4.3.0 through 4.3.4 Spring Cloud Function versions 4.2.0 through 4.2.7 Spring Cloud Function versions 3.2.16 and earlier Description Composition lookup can...

PT-2026-82706

Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 5.0.0 through 5.0.3 Spring Cloud Function versions 4.3.0 through 4.3.4 Spring Cloud Function versions 4.2.0 through 4.2.7 Spring Cloud Function versions 3.2.16 and earlier Description There is a potential for...

Exploit for Code Injection in Vmware Spring_Cloud_Function

No d...

CVE-2026-59291

CVE-2026-59291...

com.amazonaws.serverless:aws-serverless-java-container-springboot4 (>=3.0.0, <=3.0.3), org.springframework.cloud:spring-cloud-function-adapter-azure-web (>=4.2.0, <=5.0.3) potentially affected by CVE-2026-59297 via org.springframework.cloud:spring-cloud-function-serverless-web (>=4.2.0, <=5.0.3)

org.springframework.cloud:spring-cloud-function-serverless-web MAVEN version =4.2.0, =3.0.0, =4.2.0, =5.0.3 Source cves: CVE-2026-59297 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267419...

ch.sbb:spring-cloud-stream-binder-solace (>=8.0.0, <=9.3.0), cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.1.0.1) +275 more potentially affected by CVE-2026-59299 via org.springframework.cloud:spring-cloud-function-context (>=5.0.0-m1, <=5.0.3)

org.springframework.cloud:spring-cloud-function-context MAVEN version =5.0.0-m1, =8.0.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.0, =1.0.0, =1.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.1 and more Source cves: CVE-2026-59299 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267413...

com.limemojito.oss.standards.aws:lambda-sql (>=13.0.2, <=18.0.300), com.limemojito.oss.standards.aws:lambda-utilities (>=13.0.2, <=18.0.300) +50 more potentially affected by CVE-2026-59300 via org.springframework.cloud:spring-cloud-function-adapter-aws (>=5.0.0-m1, <=5.0.3)

org.springframework.cloud:spring-cloud-function-adapter-aws MAVEN version =5.0.0-m1, =13.0.2, =13.0.2, =13.0.2, =13.0.2, =13.0.2, =13.0.2, =0.40.0, =0.40.0, =0.27.2, =0.27.2, =0.27.2, =0.40.0, =0.39.0, =0.39.0, =0.27.2, =0.43.0 and more Source cves: CVE-2026-59300 Source advisory:...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the logging process. An attacker can obtain sensitive information by accessing logs that may inadvertently contain confidential data. Remediation Upgrade...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can access sensitive information by triggering specific log events under certain conditions. Remediation Upgrade...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the isSecure function of ServerlessHttpServletRequest due to not verifying the actual scheme. An attacker can potentially access or modify sensitive information by exploiting this improper security che...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the composition lookup. An attacker can manipulate the base function by injecting malicious components during the lookup process,...