Spring Cloud Function

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Potential arbitrary file read and SSRF vulnerability in Spring Cloud FunctionCVE-2026-59291Spring · CVSS 2 · 0.2% likely

   CWE-918

2. Potential for logging sensitive data in Spring Cloud Function AzureCVE-2026-59301Spring · CVSS 3.1 · 0.2% likely

   CWE-532

3. Potential for improper filtering of HTTP headers in Spring Cloud FunctionCVE-2026-59298Spring · CVSS 3.1 · 0.2% likely

   CWE-20

4. Potential for logging sensitive data in Spring Cloud Function AWSCVE-2026-59300Spring · CVSS 3.1 · 0.2% likely

   CWE-532

5. Composition lookup can potentially poison base function in Spring Cloud FunctionCVE-2026-59299Spring · CVSS 3.1 · 0.2% likely

   CWE-471

6. Unbounded cache for function definitionsCVE-2026-40990Spring · CVSS 5.7 · 0.2% likely

   CWE-770

7. Self Routing guard bypassed via function compositionCVE-2026-40989Spring · CVSS 5.7 · 0.2% likely

   CWE-674

8. Spring Cloud Function can incorrectly determine if URI is secureCVE-2026-59297Spring · CVSS 3.1 · 0.1% likely

   CWE-346

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.