{"id":"CLSA-2026-1794413478","summary":"TuxCare security update for io.micrometer (2 CVEs)","details":"TuxCare rebuilt 3 io.micrometer packages to address 2 CVEs. Fixed in 1.12.6-tuxcare.2.","modified":"2026-11-11T19:30:03.704274932Z","published":"2026-11-11T17:11:20Z","upstream":["CVE-2026-40984","CVE-2026-59296"],"affected":[{"package":{"name":"io.micrometer:micrometer-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.micrometer/micrometer-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.6"},{"fixed":"1.12.6-tuxcare.2"}]}],"versions":["1.12.6","1.12.6-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json","tuxcare":{"base_version":"1.12.6","fixed_version":"1.12.6-tuxcare.2"}}},{"package":{"name":"io.micrometer:micrometer-jetty11","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.micrometer/micrometer-jetty11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.6"},{"fixed":"1.12.6-tuxcare.2"}]}],"versions":["1.12.6","1.12.6-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"1.12.6","fixed_version":"1.12.6-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json"}},{"package":{"name":"io.micrometer:micrometer-registry-statsd","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.micrometer/micrometer-registry-statsd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.6"},{"fixed":"1.12.6-tuxcare.2"}]}],"versions":["1.12.6","1.12.6-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json","tuxcare":{"base_version":"1.12.6","fixed_version":"1.12.6-tuxcare.2"}}}],"schema_version":"1.9.2"}