Skip to content

Vulnerabilities of Spring Micrometer

Is your version affected?

CVE Summary Score Published
CVE-2026-59295 It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS)… 5.9 Medium Aug 24, 2026
CVE-2026-59296 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a… 5.9 Medium Aug 21, 2026
CVE-2026-40984 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service… 7.5 High Jun 9, 2026
CVE-2026-40983 In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service… 7.5 High Jun 9, 2026

Other Spring products