In-app reader

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

GitHub AdvisoriesJune 15, 2026Sign in to save

advisory github CVE-2026-41708 high

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.

Affected versions:

Spring Cloud Sleuth 3.1.0 through 3.1.13.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-41708
https://spring.io/security/cve-2026-41708

Discussion

Comments

No comments yet — start the thread.

Keep reading

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

References

Comments

More on Bugflare

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

References

Comments

More on Bugflare