StackRadar

CVE-2026-40984

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
330
of 17,781 indexed, latest versions
Container images
311
deployed by those charts
Fix available
1 of 1
affected package

Micrometer HTTP server instrumentations DoS

Carried by container images the latest versions of 330 of 17,781 indexed charts deploy, on 311 images.

Affected packageAffected versionsFixed inImages
micrometer-coremaven1.0.0-rc.1, 1.0.2, 1.0.4, 1.0.6+96 more1.15.12, 1.16.6311
OSV records
GHSA-g3pr-3p32-fp23

Charts affected

330 by stars
ChartLatestAffected imagesRadar Score
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
micrometer-core@1.13.5
no fix listed

Open the chart page →

2,097
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
micrometer-core@1.16.5
1.16.6

Open the chart page →

4,253
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
micrometer-core@1.1.3
no fix listed

Open the chart page →

5,596
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
micrometer-core@1.9.4
no fix listed

Open the chart page →

7,576
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
micrometer-core@1.16.5
1.16.6

Open the chart page →

4,253
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
micrometer-core@1.11.1
no fix listed
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
micrometer-core@1.12.5
no fix listed

Open the chart page →

21,211
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
micrometer-core@1.12.3
no fix listed

Open the chart page →

3,182
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
micrometer-core@1.12.13
no fix listed

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
micrometer-core@1.12.13
no fix listed

Open the chart page →

1,951
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
micrometer-core@1.3.5
no fix listed
reportportal/service-authorization:5.7.09e73114dbd15
micrometer-core@1.3.5
no fix listed
reportportal/service-jobs:5.7.2dc166c58485a
micrometer-core@1.6.4
no fix listed

Open the chart page →

25,737
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
languagetoolrubxkubeVerified publisher0.1.01 of 1See more

languagetool rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
meyay/languagetool:6.825048331e3d1
micrometer-core@1.7.12
no fix listed

Open the chart page →

15
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
micrometer-core@1.16.5
1.16.6

Open the chart page →

6,207
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
micrometer-core@1.1.18
no fix listed

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
micrometer-core@1.9.0
no fix listed

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
micrometer-core@1.9.0
no fix listed

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
micrometer-core@1.5.3
no fix listed

Open the chart page →

2,847
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
micrometer-core@1.11.3
no fix listed

Open the chart page →

1,597
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
micrometer-core@1.13.5
no fix listed

Open the chart page →

2,590
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
micrometer-core@1.10.5
no fix listed

Open the chart page →

1,528
smartsuggestsearchhub0.1.01 of 1See more

smartsuggest searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
commerceexperts/searchhub-smartsuggest-service:1.3.0341eebe7239b
micrometer-core@1.10.5
no fix listed

Open the chart page →

1,235
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
micrometer-core@1.0.0-rc.1
no fix listed

Open the chart page →

8,098
keycloakself-hosters-by-nightVerified publisher0.1.11 of 1See more

keycloak self-hosters-by-night 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.60aae0de7fca8
micrometer-core@1.16.3
1.16.6

Open the chart page →

518
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
micrometer-core@1.8.6
no fix listed
apache/shenyu-bootstrap:2.5.11bd5756f6273
micrometer-core@1.8.6
no fix listed

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
micrometer-core@1.3.1
no fix listed
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
micrometer-core@1.3.1
no fix listed

Open the chart page →

12,513
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
micrometer-core@1.14.5
no fix listed

Open the chart page →

1,690
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
micrometer-core@1.9.3
no fix listed

Open the chart page →

5,856
hetzner-iroboslamdev0.0.51 of 1See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
slamdev/hetzner-irobo:0.0.13ca20c184c55
micrometer-core@1.7.4
no fix listed

Open the chart page →

3,754
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
micrometer-core@1.5.0
no fix listed

Open the chart page →

13,605
smtp-fake-serversomeblackmagic0.1.01 of 1See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
someblackmagic/smtp-fake-server:latest0d63ba37a560
micrometer-core@1.6.2
no fix listed

Open the chart page →

4,278
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
micrometer-core@1.12.3
no fix listed

Open the chart page →

1,836
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
micrometer-core@1.5.1
no fix listed

Open the chart page →

20,190
retail-store-sample-cart-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-cart-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-cart:1.3.05d767569c976
micrometer-core@1.15.3
1.15.12

Open the chart page →

1,068
retail-store-sample-orders-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-orders-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
micrometer-core@1.15.3
1.15.12

Open the chart page →

1,223
retail-store-sample-ui-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-ui-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
micrometer-core@1.15.3
1.15.12

Open the chart page →

836
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
micrometer-core@1.9.3
no fix listed

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40984.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
micrometer-core@1.9.3
no fix listed

Open the chart page →

11,554

Container images carrying it

311 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
itzg/minecraft-server:2026.9.04e29d14082d9
micrometer-core@1.16.5
1.16.6
1
itzg/minecraft-server:latest8672e335dbef
micrometer-core@1.16.5
1.16.6
1
jhidalgo3/spring-echo-example:lateste08733191ea0
micrometer-core@1.6.3
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
micrometer-core@1.9.3
no fix listed
1
kimb88/hello-world-spring-boot:latest0639155241cb
micrometer-core@1.0.6
no fix listed
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
micrometer-core@1.15.11
1.15.12
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
micrometer-core@1.6.1
no fix listed
1
kubebb/gateway-api:v5.6.04d062f20309c
micrometer-core@1.9.4
no fix listed
1
kubebb/mesh-api:v5.7.0a3879931dfa1
micrometer-core@1.11.3
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
micrometer-core@1.13.0
no fix listed
1
ladeit/ladeit:latest962b665ffe82
micrometer-core@1.1.1
no fix listed
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
micrometer-core@1.5.5
no fix listed
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
micrometer-core@1.5.5
no fix listed
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
micrometer-core@1.6.5
no fix listed
1
lavandadelpatio/tmdb:latestded9377636e9
micrometer-core@1.11.5
no fix listed
1
lavandadelpatio/tmdb:0.0.2f36af885e915
micrometer-core@1.6.5
no fix listed
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
micrometer-core@1.10.5
no fix listed
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
micrometer-core@1.13.3
no fix listed
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
micrometer-core@1.11.4
no fix listed
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
micrometer-core@1.11.4
no fix listed
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
micrometer-core@1.11.4
no fix listed
1
meyay/languagetool:6.825048331e3d1
micrometer-core@1.7.12
no fix listed
1
nacos/nacos-server:v3.0.20e951a1d07bb
micrometer-core@1.12.8
no fix listed
1
nacos/nacos-server:v3.0.130a39cb0c54d
micrometer-core@1.12.8
no fix listed
1
nacos/nacos-server:1.4.1fe6e5688cdf3
micrometer-core@1.1.18
no fix listed
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
micrometer-core@1.12.4
no fix listed
1
openwhisk/invoker:1.0.0f5831ec85525
micrometer-core@1.2.0
no fix listed
1
openzipkin/zipkin:2.24197a9692f6a9
micrometer-core@1.12.0
no fix listed
1
openzipkin/zipkin:2.21.060c3970df479
micrometer-core@1.3.6
no fix listed
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
micrometer-core@1.3.0
no fix listed
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
micrometer-core@1.16.4
1.16.6
1
opsmx11/issuegen:v2.1.05c50ca123d88
micrometer-core@1.1.7
no fix listed
1
paulczar/spring-helloworld:latestc7140cecd5f7
micrometer-core@1.1.3
no fix listed
1
platform9community/admin-server:latestde3fa9b70df1
micrometer-core@1.5.1
no fix listed
1
platform9community/api-gateway:latest40a4970de568
micrometer-core@1.5.1
no fix listed
1
platform9community/customers-service:latest2089811e5cc6
micrometer-core@1.5.1
no fix listed
1
platform9community/vets-service:latestd1165c94dfb3
micrometer-core@1.5.1
no fix listed
1
platform9community/visits-service:latest8d11b50368c6
micrometer-core@1.5.1
no fix listed
1
refar/apm-api:v5.7.1241373fa2972
micrometer-core@1.5.3
no fix listed
1
refar/apm-operator-server:v5.7.1e5490f050f9f
micrometer-core@1.5.3
no fix listed
1
remche/shinyproxy:2.6.18bcda8a04d3b
micrometer-core@1.7.10
no fix listed
1
reportportal/service-api:5.7.29df41f8fb320
micrometer-core@1.3.5
no fix listed
1
reportportal/service-authorization:5.7.09e73114dbd15
micrometer-core@1.3.5
no fix listed
1
reportportal/service-jobs:5.15.299d27d58d6b4
micrometer-core@1.15.11
1.15.12
1
reportportal/service-jobs:5.7.2dc166c58485a
micrometer-core@1.6.4
no fix listed
1
rm3l/dev-feed-api:latest9a7f732245a3
micrometer-core@1.9.5
no fix listed
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
micrometer-core@1.8.0
no fix listed
1
robotshop/rs-shipping:latest89753ab48919
micrometer-core@1.5.4
no fix listed
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
micrometer-core@1.5.3
no fix listed
1
scmmanager/scm-manager:3.12.1bfb766050f34
micrometer-core@1.16.2
1.16.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.