Micronaut-projects vulnerabilities

Products

• Micronaut-core 7

Newest

• micronaut-projects micronaut-core Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header CVE-2026-44241 Fix available 7.5 HighMay 6, 2026
• micronaut-projects micronaut-core Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header CVE-2026-44242 Fix available 3.7 LowMay 6, 2026
• objectcomputing micronaut, micronaut-projects micronaut-core +1 more Micronaut Framework vulnerable to a Denial of Service in HTML error response caching CVE-2026-33012 Fix available 7.5 HighMarch 17, 2026
• objectcomputing micronaut, micronaut-projects micronaut-core +1 more Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices CVE-2026-33013 Fix available 8.2 HighMarch 17, 2026
• micronaut-projects micronaut-core, objectcomputing micronaut +1 more micronaut-core management endpoints vulnerable to drive-by localhost attack CVE-2024-23639 Fix available 5.1 MediumFebruary 9, 2024
• objectcomputing micronaut security, micronaut-projects micronaut-security +1 more micronaut security has invalid IdTokenClaimsValidator logic on aud CVE-2023-36820 Fix available 4.8 MediumOctober 5, 2023
• micronaut-projects micronaut-core, objectcomputing micronaut +1 more Memory leak in micronaut-core CVE-2022-21700 Fix available 5.3 MediumJanuary 18, 2022
• micronaut-projects micronaut-core, objectcomputing micronaut +1 more Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core CVE-2021-32769 Fix available 7.5 HighJuly 16, 2021