31 matches found
spring-retry-toolkit
This project provides declarative retry support for Spring applications. It is used in Spring Batch, Spring Integration, and others. Imperative retry is also supported for explicit usage. Version The version fix spring-retry with 2.0.13 for java8 and spring4 or spring5, For more information, plea...
PT-2026-134634
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.2.5.RELEASE-tuxcare.1...
PT-2026-134633
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.3.3-tuxcare.1...
PT-2026-134636
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 2.0.4-tuxcare.1...
PT-2026-134640
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.2.4.RELEASE-tuxcare.1...
PT-2026-117097
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 2.0.10-tuxcare.1...
PT-2026-116183
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 2.0.11-tuxcare.1...
PT-2026-116187
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 2.0.12-tuxcare.1...
CLSA-2026-1786520698 TuxCare security update for org.springframework.retry:spring-retry (1 CVE)
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.3.4-tuxcare.1...
PT-2026-80099
TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.3.4-tuxcare.1...
CVE-2026-41710
A flaw was found in Spring Retry. A remote attacker can craft a large number of unique requests, leading to the exhaustion of the application-wide stateful retry cache. Once the cache is full, it permanently rejects further updates, causing all subsequent stateful retries and circuit breakers in...
K000161900: Spring Retry vulnerability CVE-2026-41710
Security Advisory Description An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit...
GHSA-2827-2MXX-J8PV Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to...
ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-config-support (>=0.5.0, <=0.5.24) +6025 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=1.0.0.release, <=1.3.4)
org.springframework.retry:spring-retry MAVEN version =1.0.0.release, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.4.2, =1.4.2, =1.6.6, =1.6.6, =1.6.6, =2.8.4-alpha1, =5.3.1, =6.1.4 and more Source cves: CVE-2026-41710 Source advisory: GHSA-2827-2MXX-J8PV...
ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3591 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=2.0.0, <=2.0.12)
org.springframework.retry:spring-retry MAVEN version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =cloud-0.1, =0.6 and more Source cves: CVE-2026-41710 Source advisory: OSV:GHSA-2827-2MXX-J8PV...
ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-config-support (>=0.5.0, <=0.5.24) +6025 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=1.0.0.release, <=1.3.4)
org.springframework.retry:spring-retry MAVEN version =1.0.0.release, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.4.2, =1.4.2, =1.6.6, =1.6.6, =1.6.6, =2.8.4-alpha1, =5.3.1, =6.1.4 and more Source cves: CVE-2026-41710 Source advisory: OSV:GHSA-2827-2MXX-J8PV...
Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to...
ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3591 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=2.0.0, <=2.0.12)
org.springframework.retry:spring-retry MAVEN version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =cloud-0.1, =0.6 and more Source cves: CVE-2026-41710 Source advisory: GHSA-2827-2MXX-J8PV...
CVE-2026-41710
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to...
CVE-2026-41710 Cache Exhaustion in Stateful Retries leads to Denial of Service
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to...