spring cloud function vulnerabilities and fixes

Recent CVEs affecting spring cloud function, with upgrade or downgrade steps. 7 tracked.

Also searched as: springcloudfunction.

spring cloud function has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-08-27. Highest priority: CVE-2026-59300 (score 19/100).

• CVE-2026-59302 LOW 3.1 UPGRADE Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud St
• CVE-2026-59301 LOW 3.1 UPGRADE Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Sprin
• CVE-2026-59297 LOW 3.1 UPGRADE Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cl
• CVE-2026-59298 LOW 3.1 UPGRADE Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3
• CVE-2026-59299 LOW 3.1 UPGRADE Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0
• CVE-2026-59300 LOW 3.1 UPGRADE Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring
• CVE-2026-59291 LOW 2.0 UPGRADE Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5

FAQ

How do I fix spring cloud function vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is spring cloud function being exploited right now?

None of the tracked spring cloud function CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which spring cloud function CVE should I patch first?

CVE-2026-59300 currently ranks highest (19/100): Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring .

RSS feed for spring cloud function · ← Back to latest CVEs