CVE-2025-2240

Name of the Vulnerable Software and Affected Versions Smallrye (affected versions not specified)

Description A flaw in smallrye-fault-tolerance allows an out-of-memory (OOM) condition, which occurs when the system runs out of available RAM. This issue is externally triggered by calling the metrics URI, where each request creates a new object within the meterMap variable, potentially leading to a denial of service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.