| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.cloud:spring-cloud-function-context | ≥ 3.2.10, ≤ 3.2.15≥ 4.1.0, ≤ 4.1.9≥ 4.2.0, ≤ 4.2.5≥ 4.3.0, < 4.3.3≥ 5.0.0, < 5.0.2 | 4.3.35.0.2 |
| spring cloud function | ≥ 3.2.0, < 3.2.16≥ 4.1.0, < 4.1.10≥ 4.2.0, < 4.2.6≥ 4.3.0, < 4.3.3≥ 5.0.0, < 5.0.2 | 3.2.164.1.104.2.64.3.35.0.2 |
OOM error is possible while attempting to add infinite amount of functions to Function Registry.
Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free