Spring Micrometer Tracing vulnerabilities

Latest Spring Micrometer Tracing CVEs

Newest publication first

1. CVE-2026-59323 Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

   Published 2026-08-21

   Medium·CVSS 5.3 EPSS 0.40%

   An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Trac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.