Spring Cloud Stream vulnerabilities

5 vulnerabilities

Known vulnerabilities in Spring Cloud Stream, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.8CVE-2026-59304springspring cloud stream+1
EPSS score
0.21%
Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.63.8CVE-2026-59305springspring cloud stream+1
EPSS score
0.21%
Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.64.9CVE-2026-59302springspring cloud stream+1
EPSS score
0.17%
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.63.8CVE-2026-59303springspring cloud stream+1
EPSS score
0.21%
Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.63.8CVE-2026-59306springspring cloud stream+1
EPSS score
0.23%
Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6