Objectcomputing vulnerabilities
We track 6 vulnerabilities in Objectcomputing products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2026.
Latest Objectcomputing vulnerabilities
- 7.5 High severity
micronaut-core: Loop with Unreachable Exit Condition
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not correctly handle descending array index order during form-urlencoded body binding in
- 7.5 High severity
micronaut-core: Allocation of Resources Without Limits or Throttling
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions 4.7.0 through 4.10.16 used an unbounded ConcurrentHashMap cache with no eviction policy in its DefaultHtmlErrorResponseBodyPr
- 7.5 High severity
Opendds: Integer Overflow or Wraparound
An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to cause a Denial of Service (DoS) via a crafted message.
- 7.5 High severity
Opendds: Allocation of Resources Without Limits or Throttling
In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the vendor's position is that the product is not designed to handle a max_samples value that is too large for the amount of memory
- 7.8 High severity
micronaut-core: External Control of System or Configuration Setting
Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to drive-by
- 7.5 High severity
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data…
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `PID_PROPERTY_LIST` in a DATA submessage during participant discovery. Attackers can remotely crash Ope