CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.7. See the original NVD description below for full technical details.
CVE
CVE-2026-40989
Severity
MEDIUM
CVSS
5.7
EPSS
0.21%
Original NVD Description
Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)