{"action":"Upgrade io.smallrye:smallrye-fault-tolerance-core to 6.4.2 (6.4.x) or 6.9.0 (6.9.x) or later.","affected":[{"fixed":"6.4.2","introduced":"6.3.0"},{"fixed":"6.9.0","introduced":"6.5.0"}],"component":"io.smallrye:smallrye-fault-tolerance-core","cve_ids":["CVE-2025-2240"],"ecosystem":"Maven","epss":0.01234,"exploited":false,"fixed_versions":["6.4.2","6.9.0"],"ghsa_id":"GHSA-gfh6-3pqw-x2j4","id":"tcs_01M5N8Y4DF5H45Q7V1JV09X4FH","modified_at":"2026-09-10T03:49:48.502169582Z","published_at":"2025-03-12T15:32:06Z","references":["https://osv.dev/vulnerability/GHSA-gfh6-3pqw-x2j4","https://nvd.nist.gov/vuln/detail/CVE-2025-2240","https://github.com/smallrye/smallrye-fault-tolerance/pull/985","https://github.com/smallrye/smallrye-fault-tolerance/pull/985/files#diff-88c4a089e0cb88e4bdf285490e2617c29b9979a778e33957e4448260e286b91aR299","https://github.com/smallrye/smallrye-fault-tolerance/commit/e8bcad3d5e8bbac0a3219bd5c13661adf6ed6bbb","https://access.redhat.com/errata/RHSA-2025:3376","https://access.redhat.com/errata/RHSA-2025:3541","https://access.redhat.com/errata/RHSA-2025:3543","https://access.redhat.com/security/cve/CVE-2025-2240","https://bugzilla.redhat.com/show_bug.cgi?id=2351452","https://github.com/smallrye/smallrye-fault-tolerance","https://smallrye.io/blog/fault-tolerance-6-9-0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gfh6-3pqw-x2j4","url":"https://osv.dev/vulnerability/GHSA-gfh6-3pqw-x2j4"}],"summary":"SmallRye Fault Tolerance out-of-memory (OOM) issue"}