Description
All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | io.micronaut:micronaut-http-client | all versions before 1.2.11, all versions from 1.3.0 before 1.3.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.micronaut:micronaut-http-client | < 1.2.11 | 1.2.11 | GHSA-694p-xrhg-x3wm |
| Maven | io.micronaut:micronaut-http-client | >= 1.3.0, < 1.3.2 | 1.3.2 | GHSA-694p-xrhg-x3wm |