VULNERABILITY INTELLIGENCE
CVE-2026-59323
CVSS score5.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-08-21
Last modified2026-10-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.4.13 and earlier
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-770