io.micronaut.aws:micronaut-aws-alexa (5.0.0-m1), io.micronaut.aws:micronaut-aws-alexa-httpserver (5.0.0-m1) +137 more potentially affected by CVE-2026-33013 via io.micronaut:micronaut-json-core (>=5.0.0-m1, <=5.0.0-m13)

io.micronaut:micronaut-json-core MAVEN version =5.0.0-m1, =5.0.0-m13 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-json-core and may be impacted: - io.micronaut.aws:micronaut-aws-alexa 5.0.0-m1 -...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JsonBeanPropertyBinder::expandArrayToThreshold function of the form-urlencoded body binding process. An attacker can cause sustained CPU usage and unbounded memory growth,...

com.agorapulse:gru-micronaut (1.4.0), com.agorapulse:micronaut-amazon-awssdk-cloudwatch (>=1.6.1-micronaut-3.0, <=2.2.2-micronaut-3.0) +508 more potentially affected by CVE-2026-33013 via io.micronaut:micronaut-json-core (>=3.1.0, <=3.10.4)

io.micronaut:micronaut-json-core MAVEN version =3.1.0, =1.6.1-micronaut-3.0, =2.0.8-micronaut-3.0, =1.6.1-micronaut-3.0, =1.6.1-micronaut-3.0, =1.7.3-micronaut-3.0, =1.6.2-micronaut-3.0, =2.0.0-micronaut-3.0, =1.7.2-micronaut-3.0, =1.6.1-micronaut-3.0, =1.7.3-micronaut-3.0, =1.6.1-micronaut-3.0,...

com.agorapulse:micronaut-amazon-awssdk-dynamodb-loader (>=3.4.3, <=4.2.0), com.agorapulse:micronaut-amazon-awssdk-kinesis (>=3.4.3, <=4.2.0) +476 more potentially affected by CVE-2026-33013 via io.micronaut:micronaut-json-core (>=4.0.0-m1, <=4.10.15)

io.micronaut:micronaut-json-core MAVEN version =4.0.0-m1, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.4.3, =3.5.1 and more Source cves: CVE-2026-33013 Source advisory: GHSA-43W5-MMXV-CPVH...