← Back

CVE-2026-41710

nvd nist
Published: Jun 9, 2026Modified: Sep 4, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: security@vmware.com (Secondary)

Description

An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail. Affected versions: Spring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.

Affected (2)

Broadcom
1 product
Spring Retry
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Broadcom
Spring Retry
Before 1.3.5
Spring Retry
From 2.0.0 to 2.0.12.1

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.