micronaut-projects/micronaut-core Security Advisories | GitStock

medium2026-07-09

Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers

GHSA-q6gh-6v2r-hjv3

high2026-07-09

Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS

GHSA-387m-935m-c4vw

high2026-05-06

Micronaut has unbounded `formattersCache` in `TimeConverterRegistrar` that Allows Memory Exhaustion via `Accept-Language` Header

GHSA-8hjv-92q9-g4xj · CVE-2026-44241

low2026-05-06

Micronaut has Unbounded `bundleCache` in `ResourceBundleMessageSource` that Allows Memory Exhaustion via `Accept-Language` Header

GHSA-3rfq-4wpf-qqw3 · CVE-2026-44242

high2026-03-17

Micronaut Framework vulnerable to a Denial of Service in HTML error response caching

GHSA-2hcp-gjrf-7fhc · CVE-2026-33012

high2026-03-17

Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices

GHSA-43w5-mmxv-cpvh · CVE-2026-33013

medium2024-02-09

Micronaut management endpoints vulnerable to drive-by localhost attack

GHSA-583g-g682-crxf · CVE-2024-23639