GHSA-frpp-8pwq-hjrxMediumCVSS 4.3

Hibernate Reactive Vulnerable to DoS via Connection Pool Exhaustion

Published
January 26, 2026
Last Modified
February 5, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections.

🎯 Affected products1

  • maven/org.hibernate.reactive:hibernate-reactive-core:< 4.2.1

🔗 References (6)