What’s Vulnerable › Products

micronaut-projects micronaut-core vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your micronaut-projects micronaut-core version is affected

Latest micronaut-projects micronaut-core vulnerabilities

• CVE-2026-44242 — Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header (CVSS 3.7)
• CVE-2026-44241 — Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header (CVSS 7.5)
• CVE-2026-33013 — Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices (CVSS 7.5)
• CVE-2026-33012 — Micronaut Framework vulnerable to a Denial of Service in HTML error response caching (CVSS 7.5)
• CVE-2024-23639 — micronaut-core management endpoints vulnerable to drive-by localhost attack (CVSS 7.8)
• CVE-2022-21700 — Memory leak in micronaut-core (CVSS 5.3)
• CVE-2021-32769 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core (CVSS 7.5)
• CVE-2020-7611 — (CVSS 9.8)