io.micrometer vulnerabilities

Products

• io.micrometer/micrometer-core 2
• io.micrometer/micrometer-jetty11 1
• io.micrometer/micrometer-jetty12 1

Latest io.micrometer CVEs

Newest publication first

1. CVE-2026-40984 Micrometer HTTP server instrumentations DoS vulnerability

   Published 2026-06-09

   High·CVSS 7.5 EPSS 0.79%

   In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through...

2. CVE-2026-40983 Micrometer gRPC server instrumentation DoS vulnerability

   Published 2026-06-09

   High·CVSS 7.5 EPSS 0.63%

   In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.