What’s Vulnerable › Products

Spring Cloud Function vulnerabilities

12 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Spring Cloud Function version is affected

Exploited Spring Cloud Function vulnerabilities

• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Latest Spring Cloud Function vulnerabilities

• CVE-2026-59302 — Potential for logging sensitive data in Spring Cloud Stream (CVSS 4.9)
• CVE-2026-59301 — Potential for logging sensitive data in Spring Cloud Function Azure (CVSS 4.9)
• CVE-2026-59300 — Potential for logging sensitive data in Spring Cloud Function AWS (CVSS 3.5)
• CVE-2026-59299 — Composition lookup can potentially poison base function in Spring Cloud Function (CVSS 3.5)
• CVE-2026-59298 — Potential for improper filtering of HTTP headers in Spring Cloud Function (CVSS 3.5)
• CVE-2026-59297 — Spring Cloud Function can incorrectly determine if URI is secure (CVSS 3.5)
• CVE-2026-59291 — Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function (CVSS 5.5)
• CVE-2026-40990 — Unbounded cache for function definitions (CVSS 6.5)
• CVE-2026-40989 — Self Routing guard bypassed via function composition (CVSS 6.5)
• CVE-2024-22271 — Spring Cloud Function Web DOS Vulnerability (CVSS 8.2)
• CVE-2022-22979 — (CVSS 7.5)
• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited