High severity7.5NVD Advisory· Published Jun 9, 2026· Updated Sep 14, 2026
CVE-2026-40983
CVE-2026-40983
Description
In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.
Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
io.micrometer:micrometer-coreMaven | >= 1.16.0, < 1.16.6 | 1.16.6 |
io.micrometer:micrometer-coreMaven | >= 1.15.0, < 1.15.12 | 1.15.12 |
Affected products
42- osv-coords41 versionspkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/keycloak-fips-26.6-operatorpkg:apk/chainguard/dependency-trackpkg:apk/chainguard/keycloak-fips-26.7pkg:apk/wolfi/dependency-trackpkg:apk/chainguard/airbyte-server-fipspkg:apk/chainguard/apicurio-registrypkg:apk/chainguard/apicurio-registry-3-operator-fipspkg:apk/chainguard/camunda-zeebe-8.6pkg:apk/chainguard/infinispan-16.1pkg:apk/chainguard/keycloak-26.6-operatorpkg:apk/chainguard/keycloak-26.7pkg:apk/chainguard/keycloak-fips-26.6pkg:apk/chainguard/keycloak-fips-26.7-iamguarded-fipspkg:apk/chainguard/nacospkg:apk/chainguard/zipkinpkg:apk/chainguard/zipkin-slimpkg:apk/wolfi/apicurio-registrypkg:apk/wolfi/infinispan-16.1pkg:apk/wolfi/infinispan-16.2pkg:apk/wolfi/keycloak-26.6pkg:apk/wolfi/keycloak-26.6-iamguarded-compatpkg:apk/wolfi/keycloak-26.6-operatorpkg:apk/wolfi/zipkinpkg:apk/wolfi/zipkin-slimpkg:apk/chainguard/airbyte-serverpkg:apk/chainguard/infinispan-16.2pkg:apk/wolfi/dependency-track-bundledpkg:apk/chainguard/keycloak-fips-26.7-operatorpkg:apk/chainguard/dependency-track-apiserver-4pkg:apk/chainguard/keycloak-26.6-iamguarded-compatpkg:apk/chainguard/dependency-track-bundledpkg:apk/chainguard/keycloak-26.6pkg:apk/chainguard/apicurio-registry-3-operatorpkg:apk/chainguard/nacos-dockerpkg:apk/chainguard/keycloak-26.7-iamguarded-compatpkg:apk/chainguard/apicurio-registry-fipspkg:apk/chainguard/apache-nifi-2.11pkg:apk/chainguard/request-9047-keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.6-operatorpkg:apk/chainguard/request-9047-keycloak-fips-26.6
< 26.6.6-r0+ 40 more
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 4.14.3-r1
- (no CPE)range: < 26.7.1-r1
- (no CPE)range: < 4.14.3-r1
- (no CPE)range: < 2.0.0-r11
- (no CPE)range: < 3.3.1-r2
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 8.6.39-r7
- (no CPE)range: < 16.1.4-r9
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 26.7.1-r1
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 26.7.1-r1
- (no CPE)range: < 3.2.3-r6
- (no CPE)range: < 3.6.1-r19
- (no CPE)range: < 3.6.1-r19
- (no CPE)range: < 3.3.1-r2
- (no CPE)range: < 16.1.4-r9
- (no CPE)range: < 16.2.2-r1
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 3.6.1-r19
- (no CPE)range: < 3.6.1-r19
- (no CPE)range: < 2.0.0-r9
- (no CPE)range: < 16.2.2-r1
- (no CPE)range: < 4.14.3-r1
- (no CPE)range: < 26.7.1-r1
- (no CPE)range: < 4.14.3-r2
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 4.14.3-r1
- (no CPE)range: < 26.6.6-r0
- (no CPE)range: < 3.3.1-r2
- (no CPE)range: < 3.2.3-r4
- (no CPE)range: < 26.7.1-r1
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 2.11.0-r1
- (no CPE)range: < 26.6.4-r14
- (no CPE)range: < 26.6.4-r14
- (no CPE)range: < 26.6.4-r14
- Range: 1.16.0 through 1.16.5; 1.15.0 through 1.15.11
Patches
Vulnerability mechanics
References
13- github.com/advisories/GHSA-w737-wx49-qj23ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-40983ghsaADVISORY
- access.redhat.com/errata/RHSA-2026:36839nvdWEB
- access.redhat.com/errata/RHSA-2026:41951nvdWEB
- access.redhat.com/errata/RHSA-2026:50848nvdWEB
- access.redhat.com/errata/RHSA-2026:50849nvdWEB
- access.redhat.com/errata/RHSA-2026:54435nvdWEB
- access.redhat.com/errata/RHSA-2026:62260nvdWEB
- access.redhat.com/errata/RHSA-2026:66488nvdWEB
- access.redhat.com/security/cve/CVE-2026-40983nvdWEB
- bugzilla.redhat.com/show_bug.cginvdWEB
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40983.jsonnvdWEB
- spring.io/security/cve-2026-40983nvdWEB
News mentions
0No linked articles in our index yet.