{"api_version":"v1","generated_at":"2026-10-04T19:35:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-spring-micrometer-60eeaf28fa6d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/micrometer","name":"Micrometer","next_cursor":null,"observations":[{"affected":"1.17.0; 1.16.0 \u2264 1.16.6; 1.15.0 \u2264 1.15.12; 1.14.0 \u2264 1.14.16; \u2264 1.9.18","affected_versions_present":true,"cve_id":"CVE-2026-59295","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59295","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T17:57:52.554Z","patch_url":"","primary_source":"","published":"2026-08-24T10:10:06.302Z"},{"affected":"1.17.0; 1.16.0 \u2264 1.16.6; 1.15.0 \u2264 1.15.12; 1.14.0 \u2264 1.14.16; \u2264 1.9.18","affected_versions_present":true,"cve_id":"CVE-2026-59296","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59296","fixed":"Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258","last_modified":"2026-08-27T17:57:53.054Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-59296","primary_source":"","published":"2026-08-21T10:47:25.384Z"},{"affected":"Micrometer: 1.16.0 < 1.16.5.1, 1.15.0 < 1.15.11.1, 1.14.0 < 1.14.16, 1.13.0 < 1.13.19, 1.9.0 < 1.9.18, 1.16.0 < 1.16.6, 1.15.0 < 1.15.11., 1.14.0 < 1.14.15.1","affected_versions_present":true,"cve_id":"CVE-2026-40984","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40984","fixed":"RHSA-2026:50849: Red Hat build of Keycloak 26.6","last_modified":"2026-09-14T12:04:26.346Z","patch_url":"https://spring.io/security/cve-2026-40984","primary_source":"","published":"2026-06-09T03:47:46.447Z"},{"affected":"Micrometer: 1.16.0 < 1.16.5.1, 1.15.0 < 1.15.11.1","affected_versions_present":true,"cve_id":"CVE-2026-40983","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40983","fixed":"RHSA-2026:50849: Red Hat build of Keycloak 26.6","last_modified":"2026-09-14T12:04:32.618Z","patch_url":"https://spring.io/security/cve-2026-40983","primary_source":"","published":"2026-06-09T03:46:54.131Z"}],"source_generated_at":"2026-10-04T06:24:23.053Z","vendor":"Spring"}}