CVE-2026-59323mediumCWE-770

Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.4%

probabilidade de exploração

0.4%top 69% das CVEs

exploração observada

nãonenhuma fonte reporta

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Produtos afetados

Spring · Micrometer Tracing

Referências

https://spring.io/security/cve-2026-59323