NetSight
low3.1

CVE-2026-59298

Potential for improper filtering of HTTP headers in Spring Cloud Function.

Impact

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

Affected products

VendorProductAffected versions
VmwareSpring Cloud Function
from 3.2.0 before 3.2.17
from 4.2.0 before 4.2.8
from 4.3.0 before 4.3.5
from 5.0.0 before 5.0.4

Weakness classification

References