CLSA-2026-1794413478

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1794413478
Upstream
CVE (2)
  • CVE-2026-40984
  • CVE-2026-59296
Published
2026-11-11T17:11:20Z
Modified
2026-11-11T19:30:03Z
Summary
TuxCare security update for io.micrometer (2 CVEs)
Details

TuxCare rebuilt 3 io.micrometer packages to address 2 CVEs. Fixed in 1.12.6-tuxcare.2.

Affected packages

TuxCare:Maven
io.micrometer:micrometer-core

Package

Name
io.micrometer:micrometer-core
Purl
pkg:maven/io.micrometer/micrometer-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.12.6
Fixed
1.12.6-tuxcare.2

Affected versions

1.*
1.12.6
1.12.6-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json"
tuxcare 
{
    "base_version": "1.12.6",
    "fixed_version": "1.12.6-tuxcare.2"
}
io.micrometer:micrometer-jetty11

Package

Name
io.micrometer:micrometer-jetty11
Purl
pkg:maven/io.micrometer/micrometer-jetty11

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.12.6
Fixed
1.12.6-tuxcare.2

Affected versions

1.*
1.12.6
1.12.6-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json"
tuxcare 
{
    "base_version": "1.12.6",
    "fixed_version": "1.12.6-tuxcare.2"
}
io.micrometer:micrometer-registry-statsd

Package

Name
io.micrometer:micrometer-registry-statsd
Purl
pkg:maven/io.micrometer/micrometer-registry-statsd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.12.6
Fixed
1.12.6-tuxcare.2

Affected versions

1.*
1.12.6
1.12.6-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794413478.json"
tuxcare 
{
    "base_version": "1.12.6",
    "fixed_version": "1.12.6-tuxcare.2"
}