Vmware Spring Cloud Function vulnerabilities

• spring cloud stream, vmware spring cloud function +1 more Potential for logging sensitive data in Spring Cloud Stream CVE-2026-59302 Fix available 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Potential for logging sensitive data in Spring Cloud Function Azure CVE-2026-59301 Fix available 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Potential for logging sensitive data in Spring Cloud Function AWS CVE-2026-59300 Fix available 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Composition lookup can potentially poison base function in Spring Cloud Function CVE-2026-59299 Fix available 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Potential for improper filtering of HTTP headers in Spring Cloud Function CVE-2026-59298 Fix available 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Spring Cloud Function can incorrectly determine if URI is secure CVE-2026-59297 3.1 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function CVE-2026-59291 Fix available 2.0 LowAugust 27, 2026
• spring cloud function, vmware spring cloud function +1 more Unbounded cache for function definitions CVE-2026-40990 Fix available 5.7 MediumJune 1, 2026
• spring cloud function, vmware spring cloud function +1 more Self Routing guard bypassed via function composition CVE-2026-40989 Fix available 5.7 MediumJune 1, 2026
• spring by vmware tanzu cloud function framework, vmware spring cloud function +1 more Spring Cloud Function Web DOS Vulnerability CVE-2024-22271 Fix available 8.2 HighJuly 9, 2024
• vmware spring cloud function Denial of Service in Spring Cloud Function CVE-2022-22979 Fix available 7.5 HighJune 21, 2022
• vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 more Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression CVE-2022-22963 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalApril 1, 2022