Read the docs

micronaut-projects

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

micronaut-projects records in CISA KEV

No micronaut-projects vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opendds 8 records HIGH Micronaut 6 records HIGH Micronaut Security 1 record MEDIUM

Records

6 records in Micronaut · all components

TI-2020-06133 CVE-2020-7611 · GHSA-694p-xrhg-x3wm

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from…

Priority MEDIUM 46

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01814 Published 2020-03-30 Fixed in 1.2.11, 1.3.2 CWE-444
TI-2024-15658 CVE-2024-23639 · GHSA-583g-g682-crxf

micronaut-core management endpoints vulnerable to drive-by localhost attack

Priority LOW 34

Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2024-02-09 Fixed in 3.8.3 CWE-15
TI-2022-06076 CVE-2022-21700 · GHSA-2457-2263-mm9f

Memory leak in micronaut-core

Priority LOW 32

Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-01-18 Fixed in 3.2.7 CWE-400
Open these records in search →