Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: micronaut-projects Component: Micronaut Clear all filters
TI-2024-15658 CVE-2024-23639 · GHSA-583g-g682-crxf

micronaut-core management endpoints vulnerable to drive-by localhost attack

Priority LOW 34

Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2024-02-09 Fixed in 3.8.3 CWE-15
TI-2022-06076 CVE-2022-21700 · GHSA-2457-2263-mm9f

Memory leak in micronaut-core

Priority LOW 32

Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-01-18 Fixed in 3.2.7 CWE-400
TI-2020-06133 CVE-2020-7611 · GHSA-694p-xrhg-x3wm

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from…

Priority MEDIUM 46

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01814 Published 2020-03-30 Fixed in 1.2.11, 1.3.2 CWE-444