Approved changes feed: RSS · Atom

cpe:2.3:a:spring:micrometer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc)
ProductMicrometer (ade50f9e-257b-51f7-be35-05c0b8ef8003)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40984 vulnerable 2026-07-29 00:49:30.819299 Micrometer HTTP server instrumentations DoS vulnerability
HIGH (7.5)
In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17. micrometer-jetty11 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18. micrometer-jetty12 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18.
Published: 2026-06-09T03:47:46.447Z
Updated: 2026-07-21T12:05:04.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40983 vulnerable 2026-07-29 00:49:30.819058 Micrometer gRPC server instrumentation DoS vulnerability
HIGH (7.5)
In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.
Published: 2026-06-09T03:46:54.131Z
Updated: 2026-07-29T12:04:48.129Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.