Spring Blog

Spring Cloud Function 和 Config 已发布以修复多个 CVE 漏洞

6.5内容质量
Spring Cloud Function 和 Config 已发布以修复多个 CVE 漏洞

TL;DR · AI 摘要

Spring Cloud Function 和 Config 发布新版本以修复多个 CVE 漏洞。

核心要点

  • Spring Cloud Config 的多个版本修复了 4 个 CVE 漏洞
  • Spring Cloud Function 的多个版本修复了 2 个 CVE 漏洞
  • 企业用户应关注特定版本的更新以确保系统安全

结构提纲

按章节快速跳转。

  1. §发布信息

    Spring Cloud Function 和 Config 发布新版本以修复多个 CVE 漏洞。

  2. ·Spring Cloud Config 版本

    Spring Cloud Config 的多个版本修复了 4 个 CVE 漏洞。

  3. ·Spring Cloud Function 版本

    Spring Cloud Function 的多个版本修复了 2 个 CVE 漏洞。

  4. ·安全建议

    企业用户应关注特定版本的更新以确保系统安全。

思维导图

用一张图看清主题之间的关系。

查看大纲文本（无障碍 / 无 JS 友好）
  • Spring Cloud 安全更新
    • Spring Cloud Config
      • 版本 5.0.3
      • 版本 4.3.3
      • CVE 修复：CVE-2026-40982, CVE-2026-40981, CVE-2026-41002, CVE-2026-41004
    • Spring Cloud Function
      • 版本 5.0.2
      • 版本 4.3.3
      • CVE 修复：CVE-2026-40989, CVE-2026-40990
    • 安全建议
      • 企业用户需更新至指定版本

金句 / Highlights

值得收藏与分享的关键句。

  • Spring Cloud Config 的多个版本修复了 4 个 CVE 漏洞，包括 CVE-2026-40982 和 CVE-2026-41004。

    — 第 3 段

    ⬇︎ 下载 PNG𝕏 分享到 X
  • Spring Cloud Function 的多个版本修复了 2 个 CVE 漏洞，包括 CVE-2026-40989 和 CVE-2026-40990。

    — 第 5 段

    ⬇︎ 下载 PNG𝕏 分享到 X
  • 企业用户需关注特定版本的更新以确保系统安全，避免潜在的安全风险。

    — 第 6 段

    ⬇︎ 下载 PNG𝕏 分享到 X
#Spring#安全#微服务
打开原文

Spring Cloud Function and Config Have Been Released To Address Several CVEs

Skip to main content

[](https://spring.io/ "Home")

Why Spring

Learn

Projects

Resources

Community

Enterprise

  • [x] light

[](https://spring.io/ "Logo")

[Spring Blog](https://spring.io/blog)

RSS feeds

All Posts

Engineering

Releases

News & Events

Spring Cloud Function and Config Have Been Released To Address Several CVEs

Releases | Ryan Baxter | May 08, 2026 | 1 min read | 0 Comments

On behalf of the Spring Cloud team and everyone who has contributed, I am pleased to announce the following releases of Spring Cloud Function and Spring Cloud Config:

Spring Cloud Config

  • 5.0.3 (OSS)
  • 4.3.3 (OSS)
  • 4.2.7 (Enterprise Only)
  • 4.1.10 (Enterprise Only)
  • 3.1.13 (Enterprise Only)

The above releases address contain fixes for the following CVEs:

Spring Cloud Function

  • 5.0.2 (OSS)
  • 4.3.3 (OSS)
  • 4.1.10 (Enterprise Only)
  • 4.2.6 (Enterprise Only)
  • 3.2.16(Enterprise Only)

The above releases address contain fixes for the following CVEs:

Please refer to the releases page for more details.

Project Page | GitHub | Issues | Documentation

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Image 1
Image 1

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all

Why Spring

Generative AI

Microservices

Reactive

Event Driven

Cloud

Web Applications

Serverless

Batch

Learn

Quickstart

Guides

Courses

Get Certified

Projects

Resources

Blog

Release Calendar

Version Mappings

Release Highlights

Security Advisories

Community

Events

Authors

Enterprise

Long-term Support

Automated Upgrades

Governance and Compliance

Modern App Development

Thank You

Copyright © 2005 - 2026 Broadcom. All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.

Terms of Use • Privacy • Trademark Guidelines

Apache®, Apache Tomcat®, Apache Kafka®, Apache Cassandra™, and Apache Geode™ are trademarks or registered trademarks of the Apache Software Foundation in the United States and/or other countries. Java™, Java™ SE, Java™ EE, and OpenJDK™ are trademarks of Oracle and/or its affiliates. Kubernetes® is a registered trademark of the Linux Foundation in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Windows® and Microsoft® Azure are registered trademarks of Microsoft Corporation. “AWS” and “Amazon Web Services” are trademarks or registered trademarks of Amazon.com Inc. or its affiliates. All other trademarks and copyrights are property of their respective owners and are only mentioned for informative purposes. Other names may be trademarks of their respective owners.

[](https://www.youtube.com/user/SpringSourceDev)[](https://github.com/spring-projects)[](https://x.com/springcentral)[](https://bsky.app/profile/spring.io)

[](https://spring.io/blog/2026/05/08/spring-cloud-april-releases#header)

Cookies

Broadcom and our partners use technology, including cookies to, among other things, operate the site, analyze site usage, view and retain your site interactions, improve your experience and help us advertise. Click “Do Not Sell or Share My Personal Information,” to stay opted out of sales and sharing of your personal information. By clicking “Allow All,” you agree to our use of non-essential technologies as described in ourCookie Notice.

Allow All

Do Not Sell or Share My Personal Information

Image 2: Company Logo
Image 2: Company Logo

Privacy Preference Center

Privacy Preference Center

  • ### Your Privacy
  • ### Strictly Necessary Cookies
  • ### Sell or Share Personal Data

#### Your Privacy

When you interact with Broadcom as set forth in the Privacy Policy through visiting any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.

Cookie PolicyPrivacy Policy

#### Strictly Necessary Cookies

Always Active

These cookies are necessary for the website to function and cannot be switched off in Broadcom’s systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

#### Sell or Share Personal Data

  • [x] Sell or Share Personal Data

Under California law, some uses of cookies may be considered “selling” or “sharing” of personal information. You may opt-out of such “selling” or “sharing” by opting out of these cookies.

  • ##### Targeting Cookies
  • [x] Switch Label label

These cookies may be set through Broadcom’s site by its advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

  • ##### Functional Cookies
  • [x] Switch Label label

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

  • ##### Performance Cookies
  • [x] Switch Label label

These cookies allow Broadcom to count visits and traffic sources so Broadcom can measure and improve the performance of its site. They help Broadcom to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies Broadcom will not know when you have visited our site and will not be able to monitor its performance.

Cookie List

Consent Leg.Interest

  • [x] checkbox label label
  • [x] checkbox label label
  • [x] checkbox label label

Clear

  • - [x] checkbox label label

Apply Cancel

Confirm My Choices

Required Only Allow All

Image 3: Powered by Onetrust
Image 3: Powered by Onetrust