Root has patched CVE-2026-40983 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available.
{
"distro": "maven",
"distro_version": "",
"severity": "HIGH",
"source": "Root"
}[
"1.16.0-aikido.1",
"1.16.5-aikido.1",
"1.15.11-aikido.1",
"1.16.4-aikido.2",
"1.15.10-aikido.3",
"1.16.4-aikido.1",
"1.15.10-aikido.1",
"1.15.10-aikido.2"
]
"aikido.3"
true
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40983.json"
8
"1.15.10"
[
"1.16.0-root.io.1",
"1.16.5-root.io.1",
"1.15.11-root.io.1",
"1.16.4-root.io.2",
"1.15.10-root.io.3",
"1.16.4-root.io.1",
"1.15.10-root.io.1",
"1.15.10-root.io.2"
]
"root.io.3"
true
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-40983.json"
8
"1.15.10"