micronaut-projects

Products

ProductCVEsExploitedLatest
micronaut-core7–May 12, 2026
micronaut-security1–Oct 9, 2023

Exploited and recent CVEs

  • CVE-2026-44241 High 7.5 Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header 0.6%
  • CVE-2026-44242 Low 3.7 Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header 0.3%
  • CVE-2026-33013 High 8.2 Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices 0.6%
  • CVE-2026-33012 High 7.5 Micronaut Framework vulnerable to a Denial of Service in HTML error response caching 0.6%
  • CVE-2024-23639 Medium 5.1 micronaut-core management endpoints vulnerable to drive-by localhost attack 0.3%
  • CVE-2023-36820 Medium 4.8 micronaut security has invalid IdTokenClaimsValidator logic on aud 0.5%
  • CVE-2022-21700 Medium 5.3 Memory leak in micronaut-core 1.1%
  • CVE-2021-32769 High 7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core 1.7%