Micronaut-projects vulnerabilities
We track 4 vulnerabilities in Micronaut-projects products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Micronaut-projects vulnerabilities
- 7.5 High severity
micronaut-core: Uncontrolled Resource Consumption
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, 3.10.6, and 3.8.14, TimeConverterRegistrar caches DateTimeFormatter instances in an unbounded Concurrent
- 7.5 High severity
micronaut-core: Loop with Unreachable Exit Condition
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not correctly handle descending array index order during form-urlencoded body binding in
- 7.5 High severity
micronaut-core: Allocation of Resources Without Limits or Throttling
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions 4.7.0 through 4.10.16 used an unbounded ConcurrentHashMap cache with no eviction policy in its DefaultHtmlErrorResponseBodyPr
- 7.8 High severity
micronaut-core: External Control of System or Configuration Setting
Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to drive-by