io.micronaut.configuration:micronaut-security-oauth2 (1.2.3), io.micronaut:micronaut-discovery-client (1.2.8) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.8)

io.micronaut:micronaut-http-client MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 1.2.3 -...

io.micronaut.configuration:micronaut-security-oauth2 (2.0.0.m1), io.micronaut:micronaut-discovery-client (2.0.0.m1) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.0.0.m1)

io.micronaut:micronaut-http-client MAVEN version 2.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 2.0.0.m1 -...

io.micronaut.security:micronaut-security-oauth2 (>=2.4.0, <=2.4.3), io.micronaut.starter:micronaut-micronaut-cli (2.4.0) +4 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.4.0)

io.micronaut:micronaut-http-client MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.security:micronaut-security-oauth2 =2.4.0, =2.4.3 -...

io.micronaut.configuration:micronaut-security-oauth2 (1.2.0.rc1), io.micronaut:micronaut-discovery-client (1.2.0.rc1) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.2.0.rc1)

io.micronaut:micronaut-http-client MAVEN version 1.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 1.2.0.rc1 -...

io.micronaut.configuration:micronaut-security-oauth2 (1.3.0.rc1), io.micronaut:micronaut-discovery-client (1.3.0.rc1) +2 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.0.rc1)

io.micronaut:micronaut-http-client MAVEN version 1.3.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-security-oauth2 1.3.0.rc1 -...

io.micronaut.security:micronaut-security-oauth2 (2.5.0), io.micronaut.starter:micronaut-micronaut-cli (2.5.5) +5 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (2.5.5)

io.micronaut:micronaut-http-client MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.security:micronaut-security-oauth2 2.5.0 -...

com.github.goodforgod:micronaut-arangodb (2.2.0), io.kokuwa.micronaut:micronaut-openapi-codegen (>=2.1.5, <=2.1.6) +42 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.5.5)

io.micronaut:micronaut-inject MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - com.github.goodforgod:micronaut-arangodb 2.2.0 - io.kokuwa.micronaut:micronaut-openapi-codegen =2.1.5...

EUVD-2023-2796

Malicious code in bioql PyPI...

com.malliina:mobile-push_2.12 (1.17.0), com.malliina:play-social_2.12 (5.0.0) +1 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (6.8)

com.nimbusds:nimbus-jose-jwt MAVEN version 6.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.malliina:mobile-push2.12 1.17.0 - com.malliina:play-social2.12 5.0.0 -...

CVE-2023-36820

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.0.rc3), io.micronaut.configuration:micronaut-security-ldap (1.0.0.rc3) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.0.rc3)

io.micronaut:micronaut-http-server MAVEN version 1.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.0.rc3 -...

io.micronaut.configuration:micronaut-security-ldap (2.0.0.m1), io.micronaut.configuration:micronaut-security-oauth2 (2.0.0.m1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m1)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 2.0.0.m1 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.0), io.micronaut.configuration:micronaut-security-ldap (1.0.0) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.0)

io.micronaut:micronaut-http-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.0 -...

io.micronaut.configuration:micronaut-security-ldap (>=1.1.0, <=1.1.1), io.micronaut:micronaut-function-web (1.1.0) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0)

io.micronaut:micronaut-http-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.0.3,...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.1.0.m2, <=1.1.2), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.1.0.m2, <=1.1.1) +11 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.4)

io.micronaut:micronaut-http-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.1.0.m2, =1.1.0.m2, =1.1.0.rc2,...

io.micronaut.configuration:micronaut-security-ldap (1.0.5), io.micronaut:micronaut-function-web (1.0.5) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.5)

io.micronaut:micronaut-http-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.0.5 -...

com.bertramlabs.plugins:asset-pipeline-micronaut (>=3.0.9, <=3.2.5), io.micronaut.configuration:micronaut-security-ldap (1.1.0.m2) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.m2)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut =3.0.9, =3.2.5 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc1), io.micronaut:micronaut-function-web (1.1.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc1 -...

io.micronaut.security:micronaut-security (2.5.0), io.micronaut.security:micronaut-security-jwt (2.5.0) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.5.5)

io.micronaut:micronaut-http-server MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.security:micronaut-security 2.5.0 - io.micronaut.security:micronaut-security-j...

com.slack.api:bolt-micronaut (0.99.0), io.micronaut.configuration:micronaut-security-ldap (>=1.3.0, <=1.3.1) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.0)

io.micronaut:micronaut-http-server MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut 0.99.0 - io.micronaut.configuration:micronaut-security-ldap...