REDHAT-BUG-2486716: High severity micrometer-core vulnerability

Q: What is the severity of REDHAT-BUG-2486716?

The severity of REDHAT-BUG-2486716 is classified as high with a score of 7.

Q: What is the risk associated with REDHAT-BUG-2486716?

The risk associated with REDHAT-BUG-2486716 is a potential denial-of-service (DoS) condition caused by specially crafted HTTP requests.

Q: Which versions of Micrometer are affected by REDHAT-BUG-2486716?

Affected versions of Micrometer include micrometer-core 1.16.0 through 1.16.5, 1.15.0 through 1.15.11, 1.14.0 through 1.14.15, 1.13.0 through 1.13.18, and 1.9.0 through 1.9.17.

Q: How do I fix REDHAT-BUG-2486716?

To fix REDHAT-BUG-2486716, update Micrometer to a version that is not affected, as indicated in the security advisories.

Q: What components are impacted by REDHAT-BUG-2486716?

The components impacted by REDHAT-BUG-2486716 include micrometer-core, micrometer-jetty11, and micrometer-jetty12.

Published Jun 9, 2026

Updated

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18; 1.9.0 through 1.9.17. micrometer-jetty11 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18. micrometer-jetty12 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1.13.18.

Affected Software

3 affected components

micrometer-core>=1.16.0<=1.16.5, >=1.15.0<=1.15.11, >=1.14.0<=1.14.15, >=1.13.0<=1.13.18, >=1.9.0<=1.9.17

micrometer-jetty11>=1.16.0<=1.16.5, >=1.15.0<=1.15.11, >=1.14.0<=1.14.15, >=1.13.0<=1.13.18

micrometer-jetty12>=1.16.0<=1.16.5, >=1.15.0<=1.15.11, >=1.14.0<=1.14.15, >=1.13.0<=1.13.18

Event History

Jun 9, 2026

Data Sourced

via Red Hat·05:02 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2486716?

The severity of REDHAT-BUG-2486716 is classified as high with a score of 7.

What is the risk associated with REDHAT-BUG-2486716?

The risk associated with REDHAT-BUG-2486716 is a potential denial-of-service (DoS) condition caused by specially crafted HTTP requests.

Which versions of Micrometer are affected by REDHAT-BUG-2486716?

Affected versions of Micrometer include micrometer-core 1.16.0 through 1.16.5, 1.15.0 through 1.15.11, 1.14.0 through 1.14.15, 1.13.0 through 1.13.18, and 1.9.0 through 1.9.17.

How do I fix REDHAT-BUG-2486716?

To fix REDHAT-BUG-2486716, update Micrometer to a version that is not affected, as indicated in the security advisories.

What components are impacted by REDHAT-BUG-2486716?