Advisories · Technology
Spring Cloud Stream.
Every CVE that names Spring Cloud Stream among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.1 Low
Potential for deserialization of untrusted types in Spring Cloud Stream
- Spring Cloud Stream
- Insecure deserialization
- CVSS 3.1 Low
Partition interceptor may be improperly added while sending message
- Spring Cloud Stream
- CWE-696
- CVSS 3.1 Low
Improper caching of the original content type in Spring Cloud Stream Avro
- Spring Cloud Stream
- Memory corruption
- CVSS 3.1 Low
Dynamic destination cache size is not properly bound in Spring Cloud Stream
- Spring Cloud Stream
- Denial of service
- CVSS 3.1 Low
Potential for logging sensitive data in Spring Cloud Stream
- Spring Cloud Stream
- Information disclosure