NES for Micrometer Tracing 1.5.x Release Notes

2 versions

Comprehensive release notes and changelog for NES for Micrometer Tracing 1.5.x, including security patches, bug fixes, and feature updates across all supported versions.

Oct 5, 2026

Latest: 1.5.14

1 Patched Vulnerability

VEX Statements

October 2026

1.5.14

Released Oct 5, 2026

CVE-2026-59323

Full Version:

1.5.12-micrometer-tracing-1.5.14

Security Fixes

This release patches the following:

W3C baggage propagation in the Brave bridge is now bounded and validated (medium severity, CVE-2026-59323). W3CPropagation caps extraction at 8192 bytes and 64 entries, percent-encodes values on injection so they cannot carry , = or ; delimiters, and rejects keys outside the RFC 7230 token character set.

1.5.13

Released Oct 2, 2026

Full Version:

1.5.12-micrometer-tracing-1.5.13

Notes

First NES release of the tracing 1.5.x line. It matches upstream 1.5.12 and carries no functional changes, so it is the baseline later patches build on.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.

New releases published regularly — check back often for the latest security updates

$ cat features.txt

Security Patches
Regular updates to keep your applications secure
CVE Remediation
Rapid response to critical vulnerabilities
Expert Support
Direct access to our development team