Out of Memory Error in Spring Cloud Function Products
CVE-2026-40990

5.7MEDIUM

Key Information:

Vendor

Spring

Status
Spring Cloud Function
Vendor
CVE Published:
1 June 2026

What is CVE-2026-40990?

A significant out of memory error can occur within Spring Cloud Function products when an excessive number of functions are added to the Function Registry. This flaw could lead to operational disruptions and impact the overall performance of applications utilizing these functionalities. This vulnerability affects multiple versions across the Spring Cloud Function range, including unsupported older versions.

Affected Version(s)

Spring Cloud Function 3.2.0 < 3.2.16

Spring Cloud Function 4.1.0 < 4.1.10

Spring Cloud Function 4.2.0 < 4.2.6

References

https://spring.io/security/cve-2026-40990

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.