Skip to main content

Vendor/product archive

vmware / spring_cloud_function CVEs

Beta · best-effort

4 CVEs tagged to vmware / spring_cloud_function1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

CVE-2026-40990

Published Jun 1, 2026

OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prio…

CVSS 5.7 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2026-40989

Published Jun 1, 2026

Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16…

CVSS 5.7 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2022-22979

Published Jun 21, 2022

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condit…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2022-22963

Published Apr 1, 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a…

CVSS 9.8 · Critical
evidence mentions
17
Buzz score
77.3
KEV listedPublic PoC observed
Showing 1-4 of 4 CVEsPage 1 of 1