CVE-2026-59299: Composition lookup can potentially poison base function in Spring Cloud Function
Published Aug 27, 2026
·Updated
Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier
Affected Software
5 affected components
Spring Spring Cloud Function>=5.0.0<=5.0.3, >=4.3.0<=4.3.4, >=4.2.0<=4.2.7, <=3.2.16
VMware Spring Cloud Function>=3.2.0<3.2.17
VMware Spring Cloud Function>=4.2.0<4.2.8
VMware Spring Cloud Function>=4.3.0<4.3.5
VMware Spring Cloud Function>=5.0.0<5.0.4
Remediation
Patch Available
Event History
Aug 27, 2026
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
RemedyDescriptionSeverityWeaknessAffected Software