ch.sbb:spring-cloud-stream-binder-solace (>=8.0.0, <=9.3.0), cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.1.0.1) +191 more potentially affected by CVE-2026-59305 via org.springframework.cloud:spring-cloud-stream (>=5.0.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =5.0.0, =8.0.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.0, =1.0.0, =1.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.1 and more Source cves: CVE-2026-59305 Source advisory: MEND:CVE-2026-59305...

CVE-2026-59305

Spring Cloud Stream versions 4.2.0–4.2.6, 4.3.0–4.3.3, and 5.0.0–5.0.2 are affected by an issue where the partition interceptor may be improperly added while sending a message. The vulnerability is rated LOW severity (CVSS 3.1: 3.1), requiring high privileges, user interaction, and presenting hig...

EUVD-2026-67191

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59305 Partition interceptor may be improperly added while sending message

Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67190

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304

Spring Cloud Stream Avro is affected by an improper caching of the original content type, leading to potential confidentiality and integrity impact at a low severity (CVSS 3.1). The affected versions are Spring Cloud Stream 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The CVSS vector (AV:N/AC:H/...

com.github.piomin:spring-cloud-schema-registry-client-apicurio (2.0.0) potentially affected by CVE-2026-59304 via org.springframework.cloud:spring-cloud-stream-schema-registry-client (5.0.0)

org.springframework.cloud:spring-cloud-stream-schema-registry-client MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-stream-schema-registry-client and may be impacted: -...

CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67189

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59303 Dynamic destination cache size is not properly bound in Spring Cloud Stream

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59303

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

ch.sbb:spring-cloud-stream-binder-solace (>=8.0.0, <=9.3.0), cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.1.0.1) +191 more potentially affected by CVE-2026-59303 via org.springframework.cloud:spring-cloud-stream (>=5.0.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =5.0.0, =8.0.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.0, =1.0.0, =1.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.1 and more Source cves: CVE-2026-59303 Source advisory: MEND:CVE-2026-59303...

CVE-2026-59303

Spring Cloud Stream contains a vulnerability where the dynamic destination cache size is not properly bounded, affecting versions 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The flaw allows an unbounded cache to grow, which could lead to resource exhaustion under specific conditions. The CVSS 3...

CVE-2026-59303 Dynamic destination cache size is not properly bound in Spring Cloud Stream

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67188

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302

A flaw in Spring Cloud Stream versions 4.2.0 - 4.2.6 , 4.3.0 - 4.3.3 , and 5.0.0 - 5.0.2 allows for the unintended logging of sensitive data . This vulnerability could lead to a low-impact information disclosure where confidential information is exposed within application logs under certain condi...

CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...