CVE-2026-41710 | BDVDB-2026-338941 Detail
SpringSpring Retry
Description#
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail. Affected versions: Spring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.
Impact#
An attacker can exhaust the stateful retry cache by crafting unique failing requests, permanently preventing further stateful retries and circuit breakers from functioning, resulting in denial of service.
Weaknesses#
- CWE-770 Allocation of Resources Without Limits or Throttling
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.