VDB
KO
MEDIUM 5.7

GHSA-x4h3-g2x4-8gqv

Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry

Details

OOM error is possible while attempting to add infinite amount of functions to Function Registry.

Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.3.0 Fixed in: 4.3.3
Fix # pom.xml: bump <version>4.3.3</version> for org.springframework.cloud:spring-cloud-function-context
Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 5.0.0 Fixed in: 5.0.2
Fix # pom.xml: bump <version>5.0.2</version> for org.springframework.cloud:spring-cloud-function-context
Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 3.2.10

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.1.0

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

Maven / org.springframework.cloud:spring-cloud-function-context
Introduced in: 4.2.0

No fixed version published yet for org.springframework.cloud:spring-cloud-function-context (maven). Pin to a known-safe version or switch to an alternative.

References