micronaut-projects vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20231
4. 20241
5. 20264

Newest CVEs

• CVE-2026-44241

  Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header

  micronaut-projects · micronaut-core

  High7.5
• CVE-2026-44242

  Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header

  micronaut-projects · micronaut-core

  Low3.7
• CVE-2026-33013

  Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices

  micronaut-projects · micronaut-core

  High8.2
• CVE-2026-33012

  Micronaut Framework vulnerable to a Denial of Service in HTML error response caching

  micronaut-projects · micronaut-core

  High7.5
• CVE-2024-23639

  micronaut-core management endpoints vulnerable to drive-by localhost attack

  micronaut-projects · micronaut-core

  Medium5.1
• CVE-2023-36820

  micronaut security has invalid IdTokenClaimsValidator logic on aud

  micronaut-projects · micronaut-security

  Medium4.8
• CVE-2022-21700

  Memory leak in micronaut-core

  micronaut-projects · micronaut-core

  Medium5.3
• CVE-2021-32769

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core

  micronaut-projects · micronaut-core

  High7.5