Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
micrometer libraries could be exploited to compromise software
published 21 days ago
Summary
Three components of the micrometer library (commons, core, and observation) have known security weaknesses. The vendor has released rebuilt packages that fix these issues in version 1.12.12-tuxcare.1. Upgrade to this version as soon as possible to protect your applications.
What to do
- Update micrometer io.micrometer:micrometer-commons to version 1.12.12-tuxcare.1.
- Update micrometer io.micrometer:micrometer-core to version 1.12.12-tuxcare.1.
- Update micrometer io.micrometer:micrometer-observation to version 1.12.12-tuxcare.1.
- Update micrometer io.micrometer:micrometer-observation-test to version 1.12.12-tuxcare.1.
- Update micrometer io.micrometer:micrometer-test to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-bom to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-commons to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-core to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-jakarta9 to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-jetty11 to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-observation to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-observation-test to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-appoptics to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-atlas to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-azure-monitor to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-cloudwatch to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-cloudwatch2 to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-datadog to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-dynatrace to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-elastic to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-ganglia to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-graphite to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-health to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-humio to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-influx to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-jmx to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-kairos to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-new-relic to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-opentsdb to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-otlp to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-prometheus to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-signalfx to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-stackdriver to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-statsd to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-registry-wavefront to version 1.12.12-tuxcare.1.
- Update io.micrometer:micrometer-test to version 1.12.12-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | micrometer | io.micrometer:micrometer-commons |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | micrometer | io.micrometer:micrometer-core |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | micrometer | io.micrometer:micrometer-observation |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | micrometer | io.micrometer:micrometer-observation-test |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | micrometer | io.micrometer:micrometer-test |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-bom |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-commons |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-core |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-jakarta9 |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-jetty11 |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-observation |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-observation-test |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-appoptics |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-atlas |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-azure-monitor |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-cloudwatch |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-cloudwatch2 |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-datadog |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-dynatrace |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-elastic |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-ganglia |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-graphite |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-health |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-humio |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-influx |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-jmx |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-kairos |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-new-relic |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-opentsdb |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-otlp |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-prometheus |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-signalfx |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-stackdriver |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-statsd |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-registry-wavefront |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
| TuxCare:Maven | – | io.micrometer:micrometer-test |
>= 1.12.12, < 1.12.12-tuxcare.1 Fix: upgrade to 1.12.12-tuxcare.1
|
Original advisory text
TuxCare security update for io.micrometer (3 CVEs)
TuxCare rebuilt 3 io.micrometer packages to address 3 CVEs. Fixed in 1.12.12-tuxcare.1.
Timeline
Published14 Oct 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1792000121 · OSV
Track software like this
Free during beta