io.micronaut.kubernetes:micronaut-kubernetes-discovery-client (>=2.3.0, <=2.3.4), io.micronaut.starter:micronaut-micronaut-cli (2.3.3) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.3.3)

io.micronaut:micronaut-http-client MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.kubernetes:micronaut-kubernetes-discovery-client =2.3.0, =2.3.4 -...

io.micronaut.discovery:micronaut-discovery-client (2.4.0), io.micronaut.reactor:micronaut-reactor-http-client (1.1.1) +5 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.4)

io.micronaut:micronaut-http-client MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.discovery:micronaut-discovery-client 2.4.0 -...

io.micronaut.gcp:micronaut-gcp-http-client (3.5.0), io.micronaut.gcp:micronaut-gcp-secret-manager (3.5.0) +6 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.0)

io.micronaut:micronaut-http-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.gcp:micronaut-gcp-http-client 3.5.0 -...

io.micronaut.starter:micronaut-micronaut-cli (2.5.8), io.micronaut.starter:micronaut-starter-api (2.5.8) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.8)

io.micronaut:micronaut-http-client MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.5.8 -...

io.micronaut.reactor:micronaut-reactor-http-client (1.2.0), io.micronaut.starter:micronaut-micronaut-cli (2.5.7) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.7)

io.micronaut:micronaut-http-client MAVEN version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.reactor:micronaut-reactor-http-client 1.2.0 -...

com.github.goodforgod:micronaut-clickhouse (2.2.2), io.kestra:core (>=0.2.6, <=0.2.16) +8 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.11)

io.micronaut:micronaut-http-client MAVEN version 2.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.github.goodforgod:micronaut-clickhouse 2.2.2 - io.kestra:core =0.2.6, =0.2.6, =0.2.6,...

io.micronaut.starter:micronaut-micronaut-cli (2.5.12), io.micronaut.starter:micronaut-starter-api (2.5.12) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.12)

io.micronaut:micronaut-http-client MAVEN version 2.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.starter:micronaut-micronaut-cli 2.5.12 -...

com.agorapulse:micronaut-snitch (>=1.2.0-micronaut-2.0, <=1.2.1-micronaut-2.0), io.micronaut.starter:micronaut-micronaut-cli (2.5.13) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.13)

io.micronaut:micronaut-http-client MAVEN version 2.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.agorapulse:micronaut-snitch =1.2.0-micronaut-2.0, =1.2.1-micronaut-2.0 -...

com.agorapulse:micronaut-snitch (1.2.1-micronaut-3.0), com.github.goodforgod:micronaut-clickhouse (>=3.0.0, <=4.0.0) +78 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (>=3.0.0-m1, <=3.10.6)

io.micronaut:micronaut-http-client MAVEN version =3.0.0-m1, =3.0.0, =2.4.0, =2.4.0, =1.7.2976, =2.0.0, =1.0.0, =0.1.0, =0.2.0, =2.0.0-rc.1, =0.0.2, =v0.1.0, =v1.0, =0.1.0, =1.6.21 and more Source cves: unknown CVE Source advisory: OSV:GHSA-387M-935M-C4VW...

com.c0x12c:module-ai-image (>=0.12.0, <=0.16.8), com.c0x12c:module-ai-module-impl (>=0.5.0, <=0.16.8) +275 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (>=4.0.0-m1, <=4.10.23)

io.micronaut:micronaut-http-client MAVEN version =4.0.0-m1, =0.12.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.10.0, =0.8.0, =0.0.12, =0.0.14 - com.jongsoft.finance:bpmn-process 3.2.0 - com.jongsoft.finance:core 3.2.0 - com.jongsoft.finance:domain 3.2.0 - com.jongsoft.finance:fintrack-ap...

com.agorapulse:micronaut-snitch (3.0.0.rc1), io.micronaut.aws:micronaut-function-client-aws (>=5.0.0-m1, <=5.0.0) +209 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (>=5.0.0-m1, <=5.0.0)

io.micronaut:micronaut-http-client MAVEN version =5.0.0-m1, =5.0.0-m1, =5.0.0-m1, =6.0.0-m1, =6.0.0-m1, =5.0.0-m1, =5.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =2.0.0-m1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-387M-...

com.jongsoft.finance:core (>=2.3.0, <=2.3.1), com.jongsoft.finance:fintrack-api (>=2.3.0, <=2.3.1) +9 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.1)

io.micronaut:micronaut-http-client MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.jongsoft.finance:core =2.3.0, =2.3.0, =2.3.1 - io.kestra:core 0.2.3 -...

io.kestra:core (0.2.4), io.kestra:repository-memory (0.2.4) +11 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.3)

io.micronaut:micronaut-http-client MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.kestra:core 0.2.4 - io.kestra:repository-memory 0.2.4 - io.kestra:runner-memory 0.2.4 -...

com.github.goodforgod:micronaut-clickhouse (2.2.1), com.softamo:eurorates (1.0.0) +6 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.4)

io.micronaut:micronaut-http-client MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - com.github.goodforgod:micronaut-clickhouse 2.2.1 - com.softamo:eurorates 1.0.0 -...

io.micronaut.security:micronaut-security-oauth2 (2.5.0), io.micronaut.starter:micronaut-micronaut-cli (2.5.5) +5 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.5)

io.micronaut:micronaut-http-client MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.security:micronaut-security-oauth2 2.5.0 -...

io.kestra:core (0.2.5), io.kestra:repository-memory (0.2.5) +8 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.6)

io.micronaut:micronaut-http-client MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.kestra:core 0.2.5 - io.kestra:repository-memory 0.2.5 - io.kestra:runner-memory 0.2.5 -...

io.micronaut.aws:micronaut-aws-distributed-configuration (>=2.9.0, <=2.10.0), io.micronaut.aws:micronaut-aws-parameter-store (>=2.9.0, <=2.10.0) +10 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.9)

io.micronaut:micronaut-http-client MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.aws:micronaut-aws-distributed-configuration =2.9.0, =2.9.0, =2.9.0, =2.9.0,...

GHSA-387M-935M-C4VW Micronaut doesn't set a maximum redirect count for its HTTP Client, enabling infinite loop DoS

The Netty-based Micronaut HTTP Client does not impose a limit on HTTP redirections, potentially allowing an infinite redirect loop that could lead to a denial-of-service attack. Patches The following versions are patched: - For Micronaut 5, versions equal or greater than 5.0.1 = - For Micronaut 4...

com.c0x12c:module-ai-image (>=0.12.0, <=0.16.8), com.c0x12c:module-ai-module-impl (>=0.5.0, <=0.16.8) +293 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client-core (>=4.0.0-m1, <=4.10.23)

io.micronaut:micronaut-http-client-core MAVEN version =4.0.0-m1, =0.12.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.10.0, =0.8.0, =0.5.0, =0.2.15, =0.0.12, =0.0.14 - com.jongsoft.finance:bpmn-process 3.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-IOMICRONAUT-17912691...

io.micronaut.configuration:micronaut-aws-common (1.0.1), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.1) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.1)

io.micronaut:micronaut-http-client MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.1 -...