Spring Cloud Stream

spring_cloud_stream

Vendor: Vmware • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-59306 1Vmware 1Spring Cloud Stream Sep 4, 2026 Aug 27, 2026 N/A· v4 3.8 LOW· v3 N/A· v2 Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59305 1Vmware 1Spring Cloud Stream Sep 4, 2026 Aug 27, 2026 N/A· v4 3.8 LOW· v3 N/A· v2 Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59304 1Vmware 1Spring Cloud Stream Sep 4, 2026 Aug 27, 2026 N/A· v4 3.8 LOW· v3 N/A· v2 Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59303 1Vmware 1Spring Cloud Stream Sep 4, 2026 Aug 27, 2026 N/A· v4 3.8 LOW· v3 N/A· v2 Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6