Vendor

micronaut-projects

8 known vulnerabilities.

Products

micronaut-core 7 micronaut-security 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.1

CVE-2024-23639

micronaut-core management endpoints vulnerable to drive-by localhost attack

Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to drive-by…

micronaut-projects micronaut-core io.micronaut:micronaut-http-server-netty io.micronaut:micronaut-http-server Maven

Feb 9, 2024
Medium 4.8

CVE-2023-36820

micronaut security has invalid IdTokenClaimsValidator logic on aud

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips `aud` claim validation if token is issued by same identity issuer/pro…

micronaut-projects micronaut-security io.micronaut.security:micronaut-security-oauth2 Maven

Oct 9, 2023
Medium 5.3

CVE-2022-21700

Memory leak in micronaut-core

Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language. In affected versions sending an invalid Content Type header leads to memory leak in DefaultArgumentConversion…

micronaut-projects micronaut-core io.micronaut:micronaut-http Maven

Jan 18, 2022