io.micronaut:micronaut-discovery-client (1.3.1), io.micronaut:micronaut-function-client (1.3.1) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.1)

io.micronaut:micronaut-http-client MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.3.1 - io.micronaut:micronaut-function-client 1.3....

com.github.goodforgod:micronaut-clickhouse (>=1.0.0, <=1.0.1), info.novatec:micronaut-camunda-bpm-feature (>=0.1.0, <=0.2.2) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.3)

io.micronaut:micronaut-http-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.github.goodforgod:micronaut-clickhouse =1.0.0, =0.1.0, =0.2.2 -...

io.micronaut.aws:micronaut-function-aws-custom-runtime (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.reactor:micronaut-reactor-http-client (1.0.0.rc1) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.0.0.m2)

io.micronaut:micronaut-http-client MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-function-aws-custom-runtime =2.0.0.m1, =2.0.0.m3 -...

io.micronaut.aws:micronaut-aws-parameter-store (2.2.2), io.micronaut.aws:micronaut-aws-route53 (2.2.2) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.1.2)

io.micronaut:micronaut-http-client MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-aws-parameter-store 2.2.2 - io.micronaut.aws:micronaut-aws-route...

io.micronaut.configuration:micronaut-security-oauth2 (1.2.3), io.micronaut:micronaut-discovery-client (1.2.8) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.8)

io.micronaut:micronaut-http-client MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 1.2.3 -...

io.micronaut:micronaut-discovery-client (1.2.7), io.micronaut:micronaut-function-client (1.2.7) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.7)

io.micronaut:micronaut-http-client MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.2.7 - io.micronaut:micronaut-function-client 1.2....

io.micronaut.gcp:micronaut-gcp-tracing (1.1.0), io.micronaut:micronaut-discovery-client (1.2.3) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.3)

io.micronaut:micronaut-http-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.gcp:micronaut-gcp-tracing 1.1.0 - io.micronaut:micronaut-discovery-client 1.2....

fr.cnieg.demo:demo (>=4.0.1, <=4.0.3), io.micronaut.starter:micronaut-micronaut-cli (2.2.2) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.2.2)

io.micronaut:micronaut-http-client MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - fr.cnieg.demo:demo =4.0.1, =4.0.3 - io.micronaut.starter:micronaut-micronaut-cli 2.2.2 -...

io.micronaut.configuration:micronaut-aws-common (1.0.2), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.2) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.2)

io.micronaut:micronaut-http-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.2 -...

io.micronaut.configuration:micronaut-security-oauth2 (2.0.0.m1), io.micronaut:micronaut-discovery-client (2.0.0.m1) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.0.0.m1)

io.micronaut:micronaut-http-client MAVEN version 2.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 2.0.0.m1 -...

io.micronaut.starter:micronaut-micronaut-cli (2.3.1), io.micronaut.starter:micronaut-starter-api (2.3.1) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.3.1)

io.micronaut:micronaut-http-client MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.3.1 -...

io.micronaut:micronaut-discovery-client (1.1.0.m2), io.micronaut:micronaut-function-client (1.1.0.m2) +1 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.1.0.m2)

io.micronaut:micronaut-http-client MAVEN version 1.1.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut:micronaut-discovery-client 1.1.0.m2 - io.micronaut:micronaut-function-clien...

PT-2026-58938

The Netty-based Micronaut HTTP Client does not impose a limit on HTTP redirections, potentially allowing an infinite redirect loop that could lead to a denial-of-service attack. Patches The following versions are patched: - For Micronaut 5, versions equal or greater than 5.0.1 = - For Micronaut 4...

PYSEC-2026-3444

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small...

AZL-92295 CVE-2026-59939 affecting package python-httplib2 0.20.3-3

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small...

CVE-2026-59939

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small...

CVE-2026-55688

A flaw was found in the AsyncHttpClient AHC library. The ThreadSafeCookieStore component did not properly verify the domain attribute of cookies, allowing a malicious host to set a cookie for an unrelated domain. This cookie would then be sent by the client in subsequent requests to the targeted...

BlackSheep's ClientSession is vulnerable to CRLF injection

ImpactThe HTTP Client implementation in BlackSheep is vulnerable to CRLF injection. Missing headers validation makes it possible for an attacker to modify the HTTP requests e.g. insert a new header or even create a new HTTP request.Exploitation requires developers to pass unsanitized user input...

GO-2026-5890 Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect in github.com/kerberos-io/agent/machinery

Kerberos Hub private key X-Kerberos-Hub-PrivateKey leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect in github.com/kerberos-io/agent/machinery...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Python vulnerabilities (USN-8509-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8509-1 advisory. It was discovered that Python incorrectly normalized paths in the tarfile module. An attacker could possibly use this issue to...