{"id":"ROOT-APP-MAVEN-CVE-2026-40984","summary":"CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root","details":"Root has patched CVE-2026-40984 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available.","modified":"2026-09-22T12:15:04.517127690Z","published":"2026-09-22T11:22:09Z","upstream":["CVE-2026-40984"],"database_specific":{"distro_version":"","severity":"HIGH","source":"Root","distro":"maven"},"affected":[{"package":{"name":"io.micrometer:micrometer-core","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-aikido.1"},{"fixed":"1.10.0-aikido.1"},{"fixed":"1.11.5-aikido.1"},{"fixed":"1.16.0-aikido.1"},{"fixed":"1.14.3-aikido.1"},{"fixed":"1.16.5-aikido.1"},{"fixed":"1.15.11-aikido.1"},{"fixed":"1.9.1-aikido.1"},{"fixed":"1.9.4-aikido.2"},{"fixed":"1.16.4-aikido.2"},{"fixed":"1.15.10-aikido.3"},{"fixed":"1.16.4-aikido.1"},{"fixed":"1.15.10-aikido.2"},{"fixed":"1.14.5-aikido.1"},{"fixed":"1.13.4-aikido.1"},{"fixed":"1.7.6-aikido.1"}]}],"database_specific":{"root_patched":true,"total_fixed_versions":16,"source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","upstream_version":"1.15.10","all_fixed_versions":["1.9.4-aikido.1","1.10.0-aikido.1","1.11.5-aikido.1","1.16.0-aikido.1","1.14.3-aikido.1","1.16.5-aikido.1","1.15.11-aikido.1","1.9.1-aikido.1","1.9.4-aikido.2","1.16.4-aikido.2","1.15.10-aikido.3","1.16.4-aikido.1","1.15.10-aikido.2","1.14.5-aikido.1","1.13.4-aikido.1","1.7.6-aikido.1"],"root_patch_version":"aikido.3"}},{"package":{"name":"io.micrometer:micrometer-jetty11","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-aikido.1"},{"fixed":"1.16.4-aikido.1"},{"fixed":"1.13.4-aikido.1"},{"fixed":"1.15.10-aikido.3"}]}],"database_specific":{"root_patch_version":"aikido.3","root_patched":true,"total_fixed_versions":4,"source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","upstream_version":"1.15.10","all_fixed_versions":["1.12.0-aikido.1","1.16.4-aikido.1","1.13.4-aikido.1","1.15.10-aikido.3"]}},{"package":{"name":"io.micrometer:micrometer-jetty12","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.4-aikido.2"},{"fixed":"1.15.10-aikido.3"},{"fixed":"1.13.4-aikido.1"}]}],"database_specific":{"upstream_version":"1.15.10","source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","all_fixed_versions":["1.16.4-aikido.2","1.15.10-aikido.3","1.13.4-aikido.1"],"root_patch_version":"aikido.3","root_patched":true,"total_fixed_versions":3}},{"package":{"name":"io.root.io.micrometer:micrometer-core","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-root.io.1"},{"fixed":"1.10.0-root.io.1"},{"fixed":"1.11.5-root.io.1"},{"fixed":"1.16.0-root.io.1"},{"fixed":"1.14.3-root.io.1"},{"fixed":"1.16.5-root.io.1"},{"fixed":"1.15.11-root.io.1"},{"fixed":"1.9.1-root.io.1"},{"fixed":"1.9.4-root.io.2"},{"fixed":"1.16.4-root.io.2"},{"fixed":"1.15.10-root.io.3"},{"fixed":"1.16.4-root.io.1"},{"fixed":"1.15.10-root.io.2"},{"fixed":"1.14.5-root.io.1"},{"fixed":"1.13.4-root.io.1"},{"fixed":"1.7.6-root.io.1"}]}],"database_specific":{"source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","root_patch_version":"root.io.3","root_patched":true,"total_fixed_versions":16,"upstream_version":"1.15.10","all_fixed_versions":["1.9.4-root.io.1","1.10.0-root.io.1","1.11.5-root.io.1","1.16.0-root.io.1","1.14.3-root.io.1","1.16.5-root.io.1","1.15.11-root.io.1","1.9.1-root.io.1","1.9.4-root.io.2","1.16.4-root.io.2","1.15.10-root.io.3","1.16.4-root.io.1","1.15.10-root.io.2","1.14.5-root.io.1","1.13.4-root.io.1","1.7.6-root.io.1"]}},{"package":{"name":"io.root.io.micrometer:micrometer-jetty11","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-root.io.1"},{"fixed":"1.16.4-root.io.1"},{"fixed":"1.13.4-root.io.1"},{"fixed":"1.15.10-root.io.3"}]}],"database_specific":{"root_patched":true,"total_fixed_versions":4,"upstream_version":"1.15.10","source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","all_fixed_versions":["1.12.0-root.io.1","1.16.4-root.io.1","1.13.4-root.io.1","1.15.10-root.io.3"],"root_patch_version":"root.io.3"}},{"package":{"name":"io.root.io.micrometer:micrometer-jetty12","ecosystem":"Root:Maven"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.4-root.io.2"},{"fixed":"1.15.10-root.io.3"},{"fixed":"1.13.4-root.io.1"}]}],"database_specific":{"upstream_version":"1.15.10","all_fixed_versions":["1.16.4-root.io.2","1.15.10-root.io.3","1.13.4-root.io.1"],"root_patch_version":"root.io.3","source":"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40984.json","root_patched":true,"total_fixed_versions":3}}],"schema_version":"1.9.0"}