GHSA-x9c7-5h6g-hq8q
Spring Cloud Function Context has Uncontrolled Recursion
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.3.0, < 4.3.3 | 4.3.3 |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 5.0.0, < 5.0.2 | 5.0.2 |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 3.2.10, <= 3.2.15 | no fix listed |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.1.0, <= 4.1.9 | no fix listed |
| Maven | org.springframework.cloud:spring-cloud-function-context | >= 4.2.0, <= 4.2.5 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Under infinite recursion in the routing layer, request-handling can cause OOM error.
Affected Spring Products and Versions:
Spring Cloud Function 3.2.x: versions prior to 3.2.16
Spring Cloud Function 4.1.x: versions prior to 4.1.10
Spring Cloud Function 4.2.x: versions prior to 4.2.6
Spring Cloud Function 4.3.x: versions prior to 4.3.3
Spring Cloud Function 5.0.x: versions prior to 5.0.2
Older, unsupported versions are also affected.
References
External links from the advisory. They lead to third-party sites.