io.javalin:javalin-bundle (>=5.2.0, <=6.5.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.5.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.13.4)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=6.6.0, <=6.7.0), io.javalin:javalin-micrometer (>=6.6.0, <=6.7.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.14.2, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.14.2, =6.6.0, =6.6.0, =6.7.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=6.6.0, <=6.7.0), io.javalin:javalin-micrometer (>=6.6.0, <=6.7.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.14.2, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.14.2, =6.6.0, =6.6.0, =6.7.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=5.2.0, <=6.5.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.5.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.13.4)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=5.2.0, <=6.7.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.7.0) +2 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: SNYK:JAVA-IOMICROMETER-18322421...