CVE-2026-41710

Name of the Vulnerable Software and Affected Versions Spring Retry versions 2.0.0 through 2.0.12 Spring Retry versions 1.3.0 through 1.3.4

Description An attacker can send a large volume of unique requests that trigger failures, which exhausts the capacity of the application-wide stateful retry cache. When the cache reaches its limit, it permanently rejects subsequent updates, leading to the failure of all subsequent stateful retries and circuit breakers within the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.