Vulnerabilidades do Spring Spring Retry
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Spring Spring Retry: 1 registro(s), com versões afetadas e correções.
CVE-2026-41710
Média · 5.9
CWE-770 09/06/2026
Cache Exhaustion in Stateful Retries leads to Denial of Service
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail.
Affected versions:
Spring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.