Low severity3.1NVD Advisory· Published Aug 27, 2026· Updated Sep 4, 2026
CVE-2026-59303
CVE-2026-59303
Description
Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<4.2.7,>=4.2.0+ 1 more
- (no CPE)range: <4.2.7,>=4.2.0
- (no CPE)range: 5.0.0 - 5.0.2, 4.3.0 - 4.3.3, 4.2.0 - 4.2.6
Patches
Vulnerability mechanics
References
1- spring.io/security/cve-2026-59303nvdPatchVendor Advisory
News mentions
1- Spring Cloud: 17 Vulnerabilities Disclosed Across Multiple Components, Ranging High to Low SeverityVypr Intelligence · Aug 27, 2026