Spring By VMware Tanzu

3 CVEs across 3 Spring By VMware Tanzu products. Browse Spring By VMware Tanzu vulnerabilities, severities, and proof-of-concept exploits.

Spring By VMware Tanzu products with known CVEs

ProductCVEs
Spring Cloud Function Framework1
Spring Cloud Skipper1
Spring Security1
Spring By VMware Tanzu CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-38827Medium4.82024-12-02The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not workin…
CVE-2024-22271High8.22024-07-09In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose…
CVE-2024-22263High8.82024-06-19Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to rece…