3.1
Low
CVE-2026-59303 Dynamic destination cache size is not properly bound in Spring Cloud Stream
Description
Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spring Cloud Stream 5.0 | 5.0.0 → 5.0.2 | No fix stated |
| Spring Cloud Stream 4.3 | 4.3.0 → 4.3.3 | No fix stated |
| Spring Cloud Stream 4.2 | 4.2.0 → 4.2.6 | No fix stated |
Other CVEs of Spring Cloud Stream
The 5 CVEs of Spring Cloud Stream →
CVE-2026-59306
Potential for deserialization of untrusted types in Spring Cloud Stream
3.1
Low
CVE-2026-59305
Partition interceptor may be improperly added while sending message
3.1
Low
CVE-2026-59304
Improper caching of the original content type in Spring Cloud Stream Avro
3.1
Low
CVE-2026-59302
Potential for logging sensitive data in Spring Cloud Stream
3.1
Low