https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:59:11.732443+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-40984 CVE-2026-40984 — Micrometer HTTP server instrumentations DoS vulnerability 2026-09-29T18:59:11.734383+00:00

Affected: Spring Micrometer, Red Hat AMQ Broker 7.13.6, Red Hat AMQ Broker 7.14.1, Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16, Red Hat Build of Apache Camel 4.18 for Quarkus 3.33, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.5, Red Hat Data Grid 8.6.2, Red Hat Streams for Apache Kafka 3.2.1, Red Hat OpenShift Dev Spaces 3.30 and 12 more

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17. micrometer-jetty11 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18. micrometer-jetty12 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18.