What is GHSA-x4h3-g2x4-8gqv?

GHSA-x4h3-g2x4-8gqv is a security advisory published by GitHub Security Advisories with Medium severity. OOM error is possible while attempting to add infinite amount of functions to Function Registry. ...

Which CVE IDs does GHSA-x4h3-g2x4-8gqv cover?

GHSA-x4h3-g2x4-8gqv covers the following CVE IDs: CVE-2026-40990. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x4h3-g2x4-8gqv?

GHSA-x4h3-g2x4-8gqv has a CVSS v3 base score of 5.7, published by GitHub Security Advisories.

GHSA-x4h3-g2x4-8gqvMediumCVSS 5.7

OOM error is possible while attempting to add infinite amount of functions to Function Registry. ...

Vendor

GitHub Security Advisories

Published

June 1, 2026

Last Modified

June 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-40990 →

📋 Description

OOM error is possible while attempting to add infinite amount of functions to Function Registry.

Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-40990
https://spring.io/security/cve-2026-40990
https://github.com/advisories/GHSA-x4h3-g2x4-8gqv