~ / search / GHSA-w737-wx49-qj23

GHSA-w737-wx49-qj23

Micrometer gRPC server instrumentation DoS

Source: GitHub Advisory Database (reviewed) High CVE-2026-40983

Packages

EcosystemPackageAffectedFixed in
Maven io.micrometer:micrometer-core >= 1.16.0, < 1.16.6 1.16.6
Maven io.micrometer:micrometer-core >= 1.15.0, < 1.15.12 1.15.12

Details

As written in the advisory (Markdown source, shown as plain text).

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

References

External links from the advisory. They lead to third-party sites.