CVE-2026-59323mediumCWE-770

CVE-2026-59323: medium-severity vulnerability in Spring Micrometer Tracing

Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

Published · Updated

Follow this CVE+ Monitor Micrometer Tracing

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Spring · Micrometer Tracing