Spring Spring Retry vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Spring Spring Retry: 1 record(s), with affected versions and fixes.
CVE-2026-41710
Medium · 5.9
CWE-770 Jun 9, 2026
Cache Exhaustion in Stateful Retries leads to Denial of Service
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail.
Affected versions:
Spring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.