{"apiVersion":"1.0","identifier":"CVE-2026-59296","description":"Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16 Micrometer 1.9.18 and earlier","publishedAt":"2026-08-21T11:17:05","lastModifiedAt":"2026-08-27T20:17:55","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59296","cvssScore":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","epssProbability":0.00197,"riskScore":0.6,"affectedProduct":"micrometer","affectedVersions":"unknown","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-59296","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-59296","en":"https://www.redsauce.net/en/cves/CVE-2026-59296","fr":"https://www.redsauce.net/fr/cves/CVE-2026-59296","pt":"https://www.redsauce.net/pt/cves/CVE-2026-59296","de":"https://www.redsauce.net/de/cves/CVE-2026-59296","sk":"https://www.redsauce.net/sk/cves/CVE-2026-59296","el":"https://www.redsauce.net/el/cves/CVE-2026-59296"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-59296"}}