medium5.7
CVE-2026-40990
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Impact
OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.springframework.cloud:spring-cloud-function-context | >= 4.3.0, < 4.3.3 | 4.3.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Cloud Function | from 3.2.0 before 3.2.16 from 4.1.0 before 4.1.10 from 4.2.0 before 4.2.6 from 4.3.0 before 4.3.3 from 5.0.0 before 5.0.2 |