What’s Vulnerable › Products

Spring Cloud Stream vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Spring Cloud Stream version is affected

Latest Spring Cloud Stream vulnerabilities

• CVE-2026-59306 — Potential for deserialization of untrusted types in Spring Cloud Stream (CVSS 3.8)
• CVE-2026-59305 — Partition interceptor may be improperly added while sending message (CVSS 3.8)
• CVE-2026-59304 — Improper caching of the original content type in Spring Cloud Stream Avro (CVSS 3.8)
• CVE-2026-59303 — Dynamic destination cache size is not properly bound in Spring Cloud Stream (CVSS 3.8)
• CVE-2026-59302 — Potential for logging sensitive data in Spring Cloud Stream (CVSS 4.9)