Denial-of-service (DoS)

Spring Cloud Sleuth is vulnerable to a Denial-of-service DoS. The vulnerability is due to specially crafted calls that can trigger a DoS condition when org.springframework.cloud:spring-cloud-sleuth-instrumentation is used with Spring TX instrumentation enabled, allowing an attacker to exploit the...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8, <=1.0.12), cn.fscode.common:common-log-spring-boot-starter (0.0.1) +426 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.1.0, <=3.1.11)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.1.0, =1.0.8, =0.0.2, =0.0.2, =1.1.0, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.6.8 and more Source cves: CVE-2026-41708 Source advisory: OSV:GHSA-26M2-9G2Q-V45Q...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8, <=1.0.12), cn.fscode.common:common-log-spring-boot-starter (0.0.1) +426 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.1.0, <=3.1.11)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.1.0, =1.0.8, =0.0.2, =0.0.2, =1.1.0, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.6.8 and more Source cves: CVE-2026-41708 Source advisory: GHSA-26M2-9G2Q-V45Q...