Threats affecting pkg:maven/org.springframework.retry/spring-retry

CVE-2026-41710 is a resource exhaustion vulnerability in Spring Retry affecting versions 1.3.0 through 1.3.4 and 2.0.0 through 2.0.12. An attacker can send many unique requests that cause failures, filling the application-wide stateful retry cache. Once full, the cache rejects further updates, causing all subsequent stateful retries and circuit breakers to fail, impacting application availability. The vulnerability has a medium severity with a CVSS score of 5.9.