Micrometer vulnerabilities

2 known vulnerabilities in Micrometer from Spring. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Micrometer: Uncontrolled Resource Consumption

  CVE-2026-40984Jun 9, 2026Spring

  In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.1

• 7.5 High severity

  Micrometer: Uncontrolled Resource Consumption

  CVE-2026-40983Jun 9, 2026Spring

  In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.