Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-59323

Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Micrometer Tracing

Default version status: unaffected

  • 1.7.0affected
  • 1.6.0 to ≤ 1.6.6affected
  • 1.5.0 to ≤ 1.5.12affected
  • 0 to ≤ 1.4.13affected

References