micronaut-projects micronaut-core
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-44241 | >= 4.3.0, < 4.10.22 ; >= 3.10.0, < 3.10.6 ; < 3.8.14 | Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header | HIGH 7.5 | 0.6 % | ||
| CVE-2026-44242 | < 4.10.22 | Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header | LOW 3.7 | 0.3 % | ||
| CVE-2026-33013 | >= 4.0.0-M1, < 4.10.16 ; < 3.10.5 | Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices | HIGH 8.2 | 0.6 % | ||
| CVE-2026-33012 | >= 4.7.0, < 4.10.17 | Micronaut Framework vulnerable to a Denial of Service in HTML error response caching | HIGH 7.5 | 0.6 % | ||
| CVE-2024-23639 | < 3.8.3 | micronaut-core management endpoints vulnerable to drive-by localhost attack | HIGH 7.8 | 0.3 % | ||
| CVE-2022-21700 | < 3.2.7 | Memory leak in micronaut-core | MEDIUM 5.3 | 1.1 % | ||
| CVE-2021-32769 | < 2.5.9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core | HIGH 7.5 | 1.7 % |