CVE-2026-59305

A flaw was found in Spring Cloud Stream. A partition interceptor may be improperly added when messages are sent. This could lead to unexpected behavior or incorrect message processing within the application, potentially affecting message routing or data integrity. Mitigation Mitigation for this...

CVE-2026-59306

A flaw was found in Spring Cloud Stream. This vulnerability involves the potential for deserialization of untrusted data. An attacker with high privileges and user interaction could exploit this to potentially impact the confidentiality and integrity of data. Mitigation To mitigate this issue,...

CVE-2026-59303

A flaw was found in Spring Cloud Stream where the dynamic destination cache size is not properly bound. This could lead to excessive memory consumption, potentially impacting system resources. An attacker with high privileges and user interaction could exploit this vulnerability over a network to...

CVE-2026-59302

A flaw was found in Spring Cloud Stream. This vulnerability could lead to the logging of sensitive data, potentially exposing confidential information. While the exact trigger is not specified, the issue allows for unintended data exposure within application logs. This could result in a low impac...

Exposure Of Sensitive Information Through Log Files

Spring Cloud Stream is vulnerable to Exposure of Sensitive Information Through Log Files. The vulnerability is due to sensitive data potentially being included in application logs, which allows an attacker with access to the log files to obtain sensitive information...

Improper Caching

Spring Cloud Stream is vulnerable to improper caching of the original content type. The vulnerability is due to the Avro handling component caching the original content type, where the cached value is reused for subsequent messages and an attacker can supply a crafted content type to cause...

Insecure Deserialization

Spring Cloud Stream is vulnerable to insecure deserialization. The vulnerability is due to deserialization of untrusted types, where crafted serialized objects are deserialized without validation and attackers can supply malicious payloads to achieve code execution...

Unbounded Cache Size

Spring Cloud Stream is vulnerable to an unbounded cache size. The vulnerability is due to improper bounding of the dynamic destination cache size, where the cache can grow without limit and attackers can trigger excessive memory usage to cause a denial‑of‑service condition...

CVE-2026-59305

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59306

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59303

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59306 Potential for deserialization of untrusted types in Spring Cloud Stream

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67194

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59306

Spring Cloud Stream is affected by a potential deserialization of untrusted types vulnerability. The impacted versions are 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The CNA-assigned CVSS v3.1 score is 3.1 (Low) , reflecting a network attack vector with high complexity, high privileges require...

CVE-2026-59306 Potential for deserialization of untrusted types in Spring Cloud Stream

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67191

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59305

Spring Cloud Stream versions 4.2.0–4.2.6, 4.3.0–4.3.3, and 5.0.0–5.0.2 are affected by an issue where the partition interceptor may be improperly added while sending a message. The vulnerability is rated LOW severity (CVSS 3.1: 3.1), requiring high privileges, user interaction, and presenting hig...

CVE-2026-59305 Partition interceptor may be improperly added while sending message

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...