StackRadar

CVE-2026-41710

Medium

Advisory

Published 9 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
108
deployed by those charts
Fix available
1 of 1
affected package

Spring Retry has Cache Exhaustion in Stateful Retries that leads to Denial of Service

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 108 images.

Affected packageAffected versionsFixed inImages
spring-retrymaven1.2.0.RELEASE, 1.2.3.BUILD-SNAPSHOT, 1.2.5.RELEASE, 1.3.0+14 more2.0.13108
OSV records
GHSA-2827-2mxx-j8pv

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
spring-retry@1.3.4
no fix listed

Open the chart page →

568
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-retry@1.2.5.RELEASE
no fix listed

Open the chart page →

34,754
helm-airportshelm-airports0.1.03 of 7See more

helm-airports helm-airports 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
spring-retry@2.0.1
2.0.13
dina1993/airports-consumer:latest669d146a5e63
spring-retry@2.0.1
2.0.13
dina1993/airports-producer:latest3d6b0dac1cb4
spring-retry@2.0.1
2.0.13

Open the chart page →

12,696
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
spring-retry@2.0.11
2.0.13

Open the chart page →

25,017
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-retry@1.3.1
no fix listed

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-retry@1.3.1
no fix listed

Open the chart page →

27,721
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-retry@1.3.1
no fix listed

Open the chart page →

3,679
lavandaluiscajl0.0.1343 of 5See more

lavanda luiscajl 0.0.134

3 of the 5 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-retry@1.2.5.RELEASE
no fix listed
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-retry@1.2.5.RELEASE
no fix listed
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-retry@1.3.1
no fix listed

Open the chart page →

18,248
tmdbluiscajl0.2.41 of 1See more

tmdb luiscajl 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:latestded9377636e9
spring-retry@2.0.4
2.0.13

Open the chart page →

2,234
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
spring-retry@1.3.1
no fix listed
hugohg34/toposervice:0.0.2812a03b3f274
spring-retry@1.3.2
no fix listed

Open the chart page →

29,588
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
spring-retry@2.0.3
2.0.13

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
spring-retry@2.0.3
2.0.13

Open the chart page →

5,129
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
spring-retry@2.0.1
2.0.13

Open the chart page →

3,083
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
spring-retry@1.3.1
no fix listed

Open the chart page →

27,721
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
spring-retry@1.3.3
no fix listed

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-retry@1.3.3
no fix listed

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
spring-retry@1.3.3
no fix listed

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
spring-retry@1.3.3
no fix listed

Open the chart page →

5,873
bpjstk-serviceopenshift1.0.01 of 6See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
spring-retry@1.3.4
no fix listed

Open the chart page →

34,671
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
spring-retry@2.0.11
2.0.13

Open the chart page →

7,792
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
spring-retry@1.3.2
no fix listed

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
spring-retry@1.3.2
no fix listed

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
spring-retry@1.3.2
no fix listed

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
spring-retry@1.3.2
no fix listed

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
spring-retry@1.3.2
no fix listed

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
spring-retry@1.3.2
no fix listed

Open the chart page →

13,100
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-retry@1.3.1
no fix listed

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-retry@1.2.3.BUILD-SNAPSHOT
no fix listed

Open the chart page →

19,720
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
spring-retry@1.3.1
no fix listed

Open the chart page →

27,558
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
spring-retry@1.3.0
no fix listed
slagattollas/toposervice-practica:latestdc63973dae0d
spring-retry@1.3.0
no fix listed

Open the chart page →

28,484
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
spring-retry@1.3.3
no fix listed

Open the chart page →

2,564
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
spring-retry@1.2.5.RELEASE
no fix listed
reportportal/service-jobs:5.7.2dc166c58485a
spring-retry@1.3.1
no fix listed

Open the chart page →

25,737
retail-store-sample-orders-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-orders-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
spring-retry@2.0.12
2.0.13

Open the chart page →

1,223
retail-store-sample-ui-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-ui-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
spring-retry@2.0.12
2.0.13

Open the chart page →

836
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.54 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

4 of the 6 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
spring-retry@1.3.4
no fix listed
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
spring-retry@1.3.4
no fix listed
fimperato/static-src-info-data-transformation:1.0.5-RELEASEdf05c388ea6c
spring-retry@1.3.4
no fix listed
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
spring-retry@1.3.4
no fix listed

Open the chart page →

13,646
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
spring-retry@2.0.11
2.0.13

Open the chart page →

4,674
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.4.1645f43b688f7
spring-retry@1.3.3
no fix listed

Open the chart page →

25,394
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
spring-retry@2.0.8
2.0.13

Open the chart page →

2,144
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
spring-retry@2.0.12
2.0.13

Open the chart page →

1,527
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-retry@1.3.1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-41710.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-retry@1.3.1
no fix listed

Open the chart page →

28,605

Container images carrying it

108 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
franrobles8/planner:v3.099985392d63c
spring-retry@1.3.0
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-retry@1.2.5.RELEASE
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
spring-retry@1.3.3
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-retry@1.2.5.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-retry@1.2.5.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-retry@1.2.5.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-retry@1.2.5.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-retry@1.2.5.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-retry@1.2.5.RELEASE
no fix listed
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
spring-retry@1.3.2
no fix listed
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
spring-retry@1.3.2
no fix listed
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
spring-retry@1.3.2
no fix listed
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
spring-retry@1.3.2
no fix listed
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
spring-retry@1.3.2
no fix listed
1
gurolakman/ussigw-core:1.0.48739565c3ea2
spring-retry@1.3.2
no fix listed
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-retry@1.3.1
no fix listed
1
hugohg34/planner:0.0.2171f61e8d7e2
spring-retry@1.3.1
no fix listed
1
hugohg34/toposervice:0.0.2812a03b3f274
spring-retry@1.3.2
no fix listed
1
j4ckhunter/consumer:1.00bb7a429e3e75
spring-retry@1.3.3
no fix listed
1
j4ckhunter/producer:1.006ba447609b12
spring-retry@1.3.3
no fix listed
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-retry@1.2.5.RELEASE
no fix listed
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-retry@1.2.5.RELEASE
no fix listed
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-retry@1.3.1
no fix listed
1
lavandadelpatio/tmdb:latestded9377636e9
spring-retry@2.0.4
2.0.13
1
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-retry@1.3.1
no fix listed
1
lourdesmorente/new-planner:1.0.0608745878cdb
spring-retry@1.3.1
no fix listed
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
spring-retry@2.0.3
2.0.13
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
spring-retry@2.0.3
2.0.13
1
molynx/planner:v1441c9f52f092
spring-retry@1.3.1
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
spring-retry@2.0.11
2.0.13
1
oscarsotosanchez/planner:v1.0730c00a099b8
spring-retry@1.3.0
no fix listed
1
pcarrascoponce/planner:v1.0981fc482442c
spring-retry@1.3.1
no fix listed
1
reportportal/service-api:5.7.29df41f8fb320
spring-retry@1.2.5.RELEASE
no fix listed
1
reportportal/service-jobs:5.15.299d27d58d6b4
spring-retry@2.0.12
2.0.13
1
reportportal/service-jobs:5.7.2dc166c58485a
spring-retry@1.3.1
no fix listed
1
robotshop/rs-shipping:latest89753ab48919
spring-retry@1.2.5.RELEASE
no fix listed
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-retry@1.3.1
no fix listed
1
slagattollas/planner-practica:latestcecd95e31486
spring-retry@1.3.0
no fix listed
1
slagattollas/toposervice-practica:latestdc63973dae0d
spring-retry@1.3.0
no fix listed
1
thingsboard/tb-node:3.4.1645f43b688f7
spring-retry@1.3.3
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
spring-retry@1.3.3
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
spring-retry@2.0.12
2.0.13
1
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-retry@1.2.3.BUILD-SNAPSHOT
no fix listed
1
vitalii1992/account-service:latest0e694d94551d
spring-retry@1.3.1
no fix listed
1
vitalii1992/analytics-service:latest8e798836ecea
spring-retry@1.3.1
no fix listed
1
vitalii1992/api-gateway-service:latestaabe6ac39356
spring-retry@2.0.1
2.0.13
1
vitalii1992/order-service:latest07c4a8833ce4
spring-retry@1.3.1
no fix listed
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
spring-retry@1.3.1
no fix listed
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
spring-retry@1.3.3
no fix listed
1
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-retry@1.3.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.