{"action":"Upgrade io.micrometer:micrometer-core to 1.15.12 (1.15.x) or 1.16.6 (1.16.x) or later.","affected":[{"fixed":"1.16.6","introduced":"1.16.0"},{"fixed":"1.15.12","introduced":"1.15.0"}],"component":"io.micrometer:micrometer-core","cve_ids":["CVE-2026-40983"],"ecosystem":"Maven","epss":0.00631,"exploited":false,"fixed_versions":["1.16.6","1.15.12"],"ghsa_id":"GHSA-w737-wx49-qj23","id":"tcs_01M5N9FSKEXRKS54KZYC4KTWQ3","modified_at":"2026-09-11T15:45:36.562871319Z","published_at":"2026-06-09T06:31:56Z","references":["https://osv.dev/vulnerability/GHSA-w737-wx49-qj23","https://nvd.nist.gov/vuln/detail/CVE-2026-40983","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/security/cve/CVE-2026-40983","https://bugzilla.redhat.com/show_bug.cgi?id=2486697","https://github.com/micrometer-metrics/micrometer","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40983.json","https://spring.io/security/cve-2026-40983"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w737-wx49-qj23","url":"https://osv.dev/vulnerability/GHSA-w737-wx49-qj23"}],"summary":"Micrometer gRPC server instrumentation DoS"}