GHSA-x4h3-g2x4-8gqv
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.3.0, < 4.3.3 | 4.3.3 |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 5.0.0, < 5.0.2 | 5.0.2 |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 3.2.10, <= 3.2.15 | no fix listed |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.1.0, <= 4.1.9 | no fix listed |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.2.0, <= 4.2.5 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
OOM error is possible while attempting to add infinite amount of functions to Function Registry.
Affected Spring Products and Versions:
Spring Cloud Function 3.2.x: versions prior to 3.2.16
Spring Cloud Function 4.1.x: versions prior to 4.1.10
Spring Cloud Function 4.2.x: versions prior to 4.2.6
Spring Cloud Function 4.3.x: versions prior to 4.3.3
Spring Cloud Function 5.0.x: versions prior to 5.0.2
Older, unsupported versions are also affected.
References
External links from the advisory. They lead to third-party sites.