Skip to content
OpenAdvisories

Package · Maven

io.micronaut:micronaut-http-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.8
    GHSA-q6gh-6v2r-hjv3

    Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers

    ### Impact > DefaultHttpClient follows redirects and forwards Authorization, Cookie, and Proxy-Authorization headers to redirect targets across domain boundaries. The blocklist only filters Host/Connection/TE/CT/CL. > Additionally, no maximum redirect count e…

    io.micronaut:micronaut-http-client Maven
  • High 7.5
    GHSA-387m-935m-c4vw

    Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS

    The Netty-based Micronaut HTTP Client does not impose a limit on HTTP redirections, potentially allowing an infinite redirect loop that could lead to a denial-of-service attack. ### Patches The following versions are patched: - For Micronaut 5, versions equal…

    io.micronaut:micronaut-http-client Maven
  • Critical 9.8
    CVE-2020-7611

    Micronaut's HTTP client is vulnerable to HTTP Request Header Injection

    All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.

    io.micronaut:micronaut-http-client Maven