Skip to content
OpenAdvisories

Product · Spring

Micrometer

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-40984

    Micrometer HTTP server instrumentations DoS vulnerability

    In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.…

    Spring Micrometer io.micrometer:micrometer-core io.micrometer:micrometer-jetty11 Maven
  • High 7.5
    CVE-2026-40983

    Micrometer gRPC server instrumentation DoS vulnerability

    In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

    Spring Micrometer io.micrometer:micrometer-core Maven