CVE-2026-59303

LowCVSS 3.1

Published: 27/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Summary

In Spring Cloud Stream, the dynamic destination cache size is not properly bound, which may lead to uncontrolled memory growth or other resource issues.

Risk Assessment

Improper binding of cache size may lead to resource exhaustion, potentially causing application failure or DoS attacks.

Recommendation

Update Spring Cloud Stream to a patched version or configure appropriate cache limits.

Original NVD description (English source)

Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6