Spring Spring Cloud Stream vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Spring Spring Cloud Stream: 5 record(s), with affected versions and fixes.
CVE-2026-59306
Low · 3.8
CWE-502 Aug 27, 2026
Potential for deserialization of untrusted types in Spring Cloud Stream
Potential for deserialization of untrusted types in Spring Cloud Stream.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59305
Low · 3.8
CWE-696 Aug 27, 2026
Partition interceptor may be improperly added while sending message
Partition interceptor may be improperly added while sending message.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59304
Low · 3.8
CWE-843 Aug 27, 2026
Improper caching of the original content type in Spring Cloud Stream Avro
Improper caching of the original content type in Spring Cloud Stream Avro.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59303
Low · 3.8
CWE-770 Aug 27, 2026
Dynamic destination cache size is not properly bound in Spring Cloud Stream
Dynamic destination cache size is not properly bound in Spring Cloud Stream.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59302
Medium · 4.9
CWE-532 Aug 27, 2026
Potential for logging sensitive data in Spring Cloud Stream
Potential for logging sensitive data in Spring Cloud Stream.
Spring Cloud Stream 5.0.0 - 5.0.2
Spring Cloud Stream 4.3.0 - 4.3.3
Spring Cloud Stream 4.2.0 - 4.2.6