io.javalin:javalin-bundle (>=5.2.0, <=6.5.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.5.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.13.4)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

io.javalin:javalin-micrometer (7.0.0-alpha.3) potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (1.14.2)

io.micrometer:micrometer-jetty12 MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-jetty12 and may be impacted: - io.javalin:javalin-micrometer 7.0.0-alpha.3 Source cves: CVE-2026-40984 Source advisory:...

io.javalin:javalin-bundle (>=6.6.0, <=6.7.0), io.javalin:javalin-micrometer (>=6.6.0, <=6.7.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.14.2, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.14.2, =6.6.0, =6.6.0, =6.7.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

io.javalin:javalin-micrometer (>=7.0.0-alpha.4, <=7.2.2), io.jexxa.jlegmed:jlegmed-metrics (>=5.5.0, <=5.5.1) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (>=1.16.1, <=1.16.5)

io.micrometer:micrometer-jetty12 MAVEN version =1.16.1, =7.0.0-alpha.4, =5.5.0, =1.0.3, =2.0.0 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

io.javalin:javalin-micrometer (7.0.0-alpha.3) potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (1.14.2)

io.micrometer:micrometer-jetty12 MAVEN version 1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-jetty12 and may be impacted: - io.javalin:javalin-micrometer 7.0.0-alpha.3 Source cves: CVE-2026-40984 Source advisory:...

io.javalin:javalin-micrometer (>=7.0.0-alpha.4, <=7.2.2), io.jexxa.jlegmed:jlegmed-metrics (>=5.5.0, <=5.5.1) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (>=1.16.1, <=1.16.5)

io.micrometer:micrometer-jetty12 MAVEN version =1.16.1, =7.0.0-alpha.4, =5.5.0, =1.0.3, =2.0.0 Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=6.6.0, <=6.7.0), io.javalin:javalin-micrometer (>=6.6.0, <=6.7.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.14.2, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.14.2, =6.6.0, =6.6.0, =6.7.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: GHSA-G3PR-3P32-FP23...

io.javalin:javalin-bundle (>=5.2.0, <=6.5.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.5.0) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.13.4)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 Source cves: CVE-2026-40984 Source advisory: OSV:GHSA-G3PR-3P32-FP23...

io.javalin:javalin-micrometer (>=7.0.0-alpha.4, <=7.2.2), io.jexxa.jlegmed:jlegmed-metrics (>=5.5.0, <=5.5.1) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (>=1.16.1, <=1.16.5)

io.micrometer:micrometer-jetty12 MAVEN version =1.16.1, =7.0.0-alpha.4, =5.5.0, =1.0.3, =2.0.0 Source cves: CVE-2026-40984 Source advisory: MEND:CVE-2026-40984...

io.javalin:javalin-bundle (>=5.2.0, <=6.7.0), io.javalin:javalin-micrometer (>=5.2.0, <=6.7.0) +2 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty11 (>=1.10.1, <=1.14.5)

io.micrometer:micrometer-jetty11 MAVEN version =1.10.1, =5.2.0, =5.2.0, =0.13.1, =0.14.0 - org.apache.zeppelin:zeppelin-server 0.12.1 Source cves: CVE-2026-40984 Source advisory: SNYK:JAVA-IOMICROMETER-18322421...

io.javalin:javalin-micrometer (>=7.0.0-alpha.4, <=7.2.2), io.jexxa.jlegmed:jlegmed-metrics (>=5.5.0, <=5.5.1) +1 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (>=1.16.1, <=1.16.5)

io.micrometer:micrometer-jetty12 MAVEN version =1.16.1, =7.0.0-alpha.4, =5.5.0, =1.0.3, =2.0.0 Source cves: CVE-2026-40984 Source advisory: SNYK:JAVA-IOMICROMETER-17260887...