Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-41708

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled. Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Spring Cloud Sleuth

Default version status: unaffected

  • 3.1.0 to < 3.1.14affected

References