Spring Cloud Function

7 known vulnerabilities in Spring Cloud Function, 1 critical, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2022-22963 CVSS 9.8 critical · actively exploited VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Latest vulnerabilities

  • CVE-2026-59301 CVSS 4.9 medium Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 …
  • CVE-2026-59300 CVSS 3.5 low Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4…
  • CVE-2026-59299 CVSS 3.5 low Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud…
  • CVE-2026-59298 CVSS 3.5 low Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0…
  • CVE-2026-59297 CVSS 3.5 low Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3…
  • CVE-2026-59291 CVSS 5.5 medium Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function…
  • CVE-2022-22963 CVSS 9.8 critical · actively exploited VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability