CVE-2026-59298

Improper filtering of HTTP headers in specific versions of Spring Cloud Function could allow an attacker to manipulate HTTP requests, potentially leading to security issues such as header injection. While the severity is rated low, organizations using affected versions (3.2.16 and earlier, and 4.2.0 to 5.0.3) should prioritize updating their software to mitigate any potential risks associated with this vulnerability. Developers and system administrators utilizing these Spring Cloud Function versions should assess their exposure and apply necessary patches.