PT-2026-82714 · Spring+1 · Spring Cloud Stream

CVE-2026-59306

·

Published

2026-08-27

·

Updated

2026-08-27

CVSS v3.1

3.1

Low

VectorAV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6

Fix

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-59306

Affected Products

Spring Cloud Stream