VDB
KO
MEDIUM 5.7

GHSA-x9c7-5h6g-hq8q

Spring Cloud Function Context has Uncontrolled Recursion

Details

Under infinite recursion in the routing layer, request-handling can cause OOM error.

Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.3.0 Fixed in: 4.3.3
Fix # pom.xml: bump <version>4.3.3</version> for org.springframework.cloud:spring-cloud-function-context
Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 5.0.0 Fixed in: 5.0.2
Fix # pom.xml: bump <version>5.0.2</version> for org.springframework.cloud:spring-cloud-function-context
Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 3.2.10

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.1.0

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.2.0

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

References