ROOT-APP-MAVEN-CVE-2026-40984 CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root

Root has patched CVE-2026-40984 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in Micrometer (CVE-2026-40984)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-40984 DESCRIPTION: In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer [CVE-2026-40983, CVE-2026-40984]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer due to issues in CVE-2026-40983, CVE-2026-40984. Micrometer is used in our speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerabili...

Important: Red Hat Security Advisory: Red Hat Data Grid 8.6.2 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

K000162297: Micrometer vulnerability CVE-2026-40984

Security Advisory Description In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9...

io.javalin:javalin-bundle (>=5.2.0, <=6.5.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.5.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.13.4)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.28.0) +7420 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (>=1.10.0, <=1.13.15)

io.micrometer:micrometer-core MAVEN version =1.10.0, =0.1.1, =0.0.4, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.9.2 and more Source...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3512 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (>=1.14.0, <=1.14.14)

io.micrometer:micrometer-core MAVEN version =1.14.0, =0.1.0, =0.1.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3512 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (>=1.14.0, <=1.14.14)

io.micrometer:micrometer-core MAVEN version =1.14.0, =0.1.0, =0.1.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

CVE-2026-40984

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17...

ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.pipestream.module:module-chunker (0.1.3) +3189 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (>=1.16.0, <=1.16.5)

io.micrometer:micrometer-core MAVEN version =1.16.0, =0.1.0-alpha.1, =0.7.20, =0.7.20, =0.7.20, =0.1.31, =0.7.20, =0.7.20, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-40984 Source advisory: MEND:CVE-2026-40984...

CVE-2026-40984

creationtimestamp| type| source ---|---|--- 2026-06-08 07:18:37+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-558 2026-06-08 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnrrjhm3tl25 2026-06-09 09:00:50+00:00| seen|...

cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability

cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +12556 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (>=1.9.0, <=1.15.11)

io.micrometer:micrometer-core MAVEN version =1.9.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.0.4, =0.1.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.6.0, =0.9.2 and more Source...