5.3
Medium
CVE-2026-59323 An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of…
Description
An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Micrometer Tracing | 1.7.0 | No fix stated |
| Micrometer Tracing 1.6 | 1.6.0 → 1.6.6 | No fix stated |
| Micrometer Tracing 1.5 | 1.5.0 → 1.5.12 | No fix stated |
| Micrometer Tracing 1.4 | earliest → 1.4.13 | No fix stated |
References
- spring.io spring.io
Timeline
- Published
- Last modified