← CVE Intelligence

CVE-2026-59306

Potential for deserialization of untrusted types in Spring Cloud Stream PUBLISHED

Description (CNA)

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6

Affected (CNA)

Vendor / productVersions
Spring / Spring Cloud Streamaffected 5.0.0 through 5.0.2; affected 4.3.0 through 4.3.3; affected 4.2.0 through 4.2.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.