CVE-2026-94449

Name of the Vulnerable Software and Affected Versions SmallRye Fault Tolerance (affected versions not specified)

Description A flaw in the SmallRye Fault Tolerance library, utilized by Quarkus for microservices strategies such as retries and circuit breakers, leads to a memory leak. The issue occurs when using the ApplyGuard or ApplyFaultTolerance annotations, as the library fails to release internal tracking objects after each request. This results in a continuous increase in memory consumption, causing the application to slow down and eventually crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.