low3.1
CVE-2026-59297
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme.
Impact
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Cloud Function | from 4.2.0 before 4.2.8 from 4.3.0 before 4.3.5 from 5.0.0 before 5.0.4 |