Vulnerabilities

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS.

VMware Workstation and Fusion contain an integer-overflow vulnerability.

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers (replyChannel,…

The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor.

A single ScriptEngine instance is reused for every message on a script-backed channel.

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit.

RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same cl…

DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation.

Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding.

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads.

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name.

A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts.

Potential for deserialization of untrusted types in Spring Cloud Stream.

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE).

An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean.

Partition interceptor may be improperly added while sending message.

Improper caching of the original content type in Spring Cloud Stream Avro.

Dynamic destination cache size is not properly bound in Spring Cloud Stream.

Potential for logging sensitive data in Spring Cloud Stream.

Potential for logging sensitive data in Spring Cloud Function Azure.

Potential for logging sensitive data in Spring Cloud Function AWS.

Composition lookup can potentially poison base function in Spring Cloud Function.