io.micronaut.jms:micronaut-jms-activemq-artemis (1.0.0.m2), io.micronaut.jms:micronaut-jms-activemq-classic (1.0.0.m2) +18 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (2.4.3)

io.micronaut:micronaut-context MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-context and may be impacted: - io.micronaut.jms:micronaut-jms-activemq-artemis 1.0.0.m2 -...

com.oracle.microtx.lra:microtx-lra-micronaut (>=24.2.2, <=26.1.1), com.slack.api:bolt-micronaut (>=1.44.0, <=1.49.0) +76 more potentially affected by CVE-2026-33012 via io.micronaut:micronaut-http-server (>=4.7.0, <=4.10.16)

io.micronaut:micronaut-http-server MAVEN version =4.7.0, =24.2.2, =1.44.0, =3.0.0, =0.0.1, =0.11.0, =1.0.0-alpha12, =1.0.0-alpha12, =1.0.0-alpha12, =0.0.27, =0.5.1, =0.0.0.1-test, =0.0.0.9-test, =0.0.0.9-test, =0.0.1.cr1, =0.0.1.cr5 - io.github.flynndi:micronaut-test 0.0.0.1 and more Source cves:...

io.micronaut.acme:micronaut-acme (6.0.0-m1), io.micronaut.aws:micronaut-aws-alexa-httpserver (5.0.0-m1) +43 more potentially affected by CVE-2026-33012 via io.micronaut:micronaut-http-server (>=5.0.0-m1, <=5.0.0-m15)

io.micronaut:micronaut-http-server MAVEN version =5.0.0-m1, =5.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.acme:micronaut-acme 6.0.0-m1 -...

com.oracle.microtx.lra:microtx-lra-micronaut (>=24.2.2, <=26.1.1), com.slack.api:bolt-micronaut (>=1.44.0, <=1.49.0) +76 more potentially affected by CVE-2026-33012 via io.micronaut:micronaut-http-server (>=4.7.0, <=4.10.16)

io.micronaut:micronaut-http-server MAVEN version =4.7.0, =24.2.2, =1.44.0, =3.0.0, =0.0.1, =0.11.0, =1.0.0-alpha12, =1.0.0-alpha12, =1.0.0-alpha12, =0.0.27, =0.5.1, =0.0.0.1-test, =0.0.0.9-test, =0.0.0.9-test, =0.0.1.cr1, =0.0.1.cr5 - io.github.flynndi:micronaut-test 0.0.0.1 and more Source cves:...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the DefaultHtmlErrorResponseBodyProvider class. An attacker can exhaust heap memory and cause a crash by sending requests that trigger exceptions with attacker-controlled messages...

com.oracle.microtx.lra:microtx-lra-micronaut (>=24.2.2, <=26.1.1), com.slack.api:bolt-micronaut (>=1.44.0, <=1.49.0) +76 more potentially affected by CVE-2026-33012 via io.micronaut:micronaut-http-server (>=4.7.0, <=4.10.16)

io.micronaut:micronaut-http-server MAVEN version =4.7.0, =24.2.2, =1.44.0, =3.0.0, =0.0.1, =0.11.0, =1.0.0-alpha12, =1.0.0-alpha12, =1.0.0-alpha12, =0.0.27, =0.5.1, =0.0.0.1-test, =0.0.0.9-test, =0.0.0.9-test, =0.0.1.cr1, =0.0.1.cr5 - io.github.flynndi:micronaut-test 0.0.0.1 and more Source cves:...

io.micronaut.configuration:micronaut-security-ldap (>=1.2.0, <=1.2.2), io.micronaut.configuration:micronaut-security-oauth2 (>=1.2.0, <=1.2.2) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.0)

io.micronaut:micronaut-http-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0,...

org.ryoframework.core:ryo-application-micronaut (>=1.1.1, <=1.3.1) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.1.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.1.1, =1.3.1 Source cves:...

com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.0.9, <=3.2.5) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.1.0.m2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut =3.0.9, =3.2.5 Source cves:...

io.micronaut.acme:micronaut-acme (2.1.0), io.micronaut.groovy:micronaut-multitenancy-gorm (2.2.0) +12 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.4)

io.micronaut:micronaut-http-server MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.acme:micronaut-acme 2.1.0 - io.micronaut.groovy:micronaut-multitenancy-gorm...

com.slack.api:bolt-micronaut (1.5.0-m2), fr.cnieg.demo:demo (>=4.0.1, <=4.0.3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.2)

io.micronaut:micronaut-http-server MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut 1.5.0-m2 - fr.cnieg.demo:demo =4.0.1, =4.0.3 -...

com.slack.api:bolt-micronaut (>=1.10.0-rc1, <=1.10.0-rc2) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.11)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.10.0-rc1, =1.10.0-rc2 Source cves:...

org.microjservice.lark:lark-api (>=0.1.0, <=0.1.3) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.3)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.microjservice.lark:lark-api =0.1.0, =0.1.3 Source cves: CVE-2024-23639 Sour...

net.javacrumbs.shedlock:shedlock-micronaut (4.21.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - net.javacrumbs.shedlock:shedlock-micronaut 4.21.0 Source cves: CVE-2024-23639...

io.micronaut.acme:micronaut-acme (3.0.0-rc1), net.javacrumbs.shedlock:shedlock-micronaut (4.25.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.8)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.micronaut.acme:micronaut-acme 3.0.0-rc1 -...

com.slack.api:bolt-micronaut (1.8.1), io.micronaut.graphql:micronaut-hello-world-groovy (2.3.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.4)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.8.1 -...

io.github.artemy-osipov.thrift:rest-bridge-micronaut (0.4.0), net.javacrumbs.shedlock:shedlock-micronaut (4.23.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.2)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.github.artemy-osipov.thrift:rest-bridge-micronaut 0.4.0 -...

com.slack.api:bolt-micronaut (>=1.0.3, <=1.0.6), info.novatec:micronaut-camunda-bpm-feature (>=0.1.0, <=0.2.2) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.3.3)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.0.3, =0.1.0, =1.0.0.rc1, =1.0.0.rc2 -...

com.slack.api:bolt-micronaut (1.0.7), net.javacrumbs.shedlock:shedlock-micronaut (>=4.9.0, <=4.12.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.3.4)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.7 - net.javacrumbs.shedlock:shedlock-micronaut...

com.slack.api:bolt-micronaut (1.7.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.0)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.7.0 Source cves: CVE-2024-23639 Source advisory:...