micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC gRPC Remote Procedure Call requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Jackson Data Binding, Micrometer, Keycloak Policy Enforcer, Apache CXF Vulnerability Details CVEID:CVE-2026-40983 DESCRIPTION: In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cau...

micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC gRPC Remote Procedure Call requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.2.SP2 security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.4.SP2 security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Security Bulletin: IBM Terracotta is affected by a Micrometer vulnerability that could allow Denial of Service (Dos) attacks

Summary IBM Terracotta uses Micrometer, a popular Java library used in Spring applications, for application monitoring within the product. Vulnerability Details CVEID:CVE-2026-40983 DESCRIPTION: In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a...

CVE-2026-40984

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

CVE-2026-40983

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC gRPC Remote Procedure Call requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system. Mitigation To mitigate this issu...

org.http4k:http4k-cloudnative (3.256.1), org.http4k:http4k-contract (3.256.1) +10 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.256.1)

org.http4k:http4k-core MAVEN version 3.256.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-cloudnative 3.256.1 - org.http4k:http4k-contract 3.256.1 - org.http4k:http4k-metrics-micrometer...

org.http4k:http4k-cloudnative (3.244.0), org.http4k:http4k-contract (3.244.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.244.0)

org.http4k:http4k-core MAVEN version 3.244.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-cloudnative 3.244.0 - org.http4k:http4k-contract 3.244.0 - org.http4k:http4k-metrics-micrometer...

org.http4k:http4k-cloudnative (3.244.0), org.http4k:http4k-contract (3.244.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (3.244.0)

org.http4k:http4k-core MAVEN version 3.244.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-cloudnative 3.244.0 - org.http4k:http4k-contract 3.244.0 - org.http4k:http4k-metrics-micrometer...

org.http4k:http4k-cloudnative (3.244.0), org.http4k:http4k-contract (3.244.0) +6 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.244.0)

org.http4k:http4k-core MAVEN version 3.244.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-cloudnative 3.244.0 - org.http4k:http4k-contract 3.244.0 - org.http4k:http4k-metrics-micrometer...

org.http4k:http4k-aws (3.247.0), org.http4k:http4k-client-apache (3.247.0) +25 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.247.0)

org.http4k:http4k-core MAVEN version 3.247.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.247.0 - org.http4k:http4k-client-apache 3.247.0 - org.http4k:http4k-client-apache-async...

ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.pipestream.module:module-chunker (0.1.3) +3205 more potentially affected by CVE-2026-40983 via io.micrometer:micrometer-core (>=1.16.0-m1, <=1.16.5)

io.micrometer:micrometer-core MAVEN version =1.16.0-m1, =0.1.0-alpha.1, =0.7.20, =0.7.20, =0.7.20, =0.1.31, =0.7.20, =0.7.20, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-40983 Source advisory: SNYK:JAVA-IOMICROMETER-17339194...

ai.koog:koog-spring-ai-starter-chat-memory (>=0.8.0-rc-1, <=1.3.0-beta), ai.koog:koog-spring-ai-starter-model-chat (>=0.7.0, <=1.3.0-beta) +3707 more potentially affected by CVE-2026-40983 via io.micrometer:micrometer-core (>=1.15.0-m2, <=1.15.11)

io.micrometer:micrometer-core MAVEN version =1.15.0-m2, =0.8.0-rc-1, =0.7.0, =0.7.0, =0.8.0-rc-1, =1.0.0, =1.0.0, =1.23.0, =1.23.0, =1.23.0, =0.6.0, =1.6.0, =1.5.4, =1.0.0, =0.9.0, =1.0.1 and more Source cves: CVE-2026-40983 Source advisory: SNYK:JAVA-IOMICROMETER-17339194...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the gRPC server instrumentation. An attacker can cause service disruption by sending specially crafted gRPC requests. Note: This issue is exploitable if an ObservationRegistry is...