It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak.
Micrometer 1.17.0
Micrometer 1.16.0 - 1.16.6
Micrometer 1.15.0 - 1.15.12
Micrometer 1.14.0 - 1.14.16
Micrometer 1.9.18 and earlier
References
| Link | Resource |
|---|---|
| https://spring.io/security/cve-2026-59295 |
Configurations
No configuration.
History
No history.
Information
Published : 2026-08-24 11:16
Updated : 2026-08-28 18:47
NVD link : CVE-2026-59295
Mitre link : CVE-2026-59295
CVE.ORG link : CVE-2026-59295
JSON object : View
Products Affected
No product.
CWE
No CWE.