Micronaut Framework 3.10.15 Released!

The Micronaut Foundation is excited to announce the release of Micronaut Core 3.10.15!

Micronaut Framework 3.10.15 is a security release. It updates managed Netty to 4.1.139.Final. This Netty security release fixes several vulnerabilities, including HTTP request/response smuggling, unbounded resource consumption in the HTTP, HTTP/2, DNS, and XML codecs, and an SNI routing bypass. We strongly recommend that all Micronaut Framework 3 users update to Micronaut Framework 3.10.15.

If you are using Micronaut Framework 4, update to Micronaut Framework 4.10.21, which updates Netty to 4.2.19.Final and Jackson to 2.21.7. If you are using Micronaut Framework 5, update to Micronaut Framework 5.2.2.

Netty 4.1 reaches end of life on July 1, 2027. If you haven’t yet updated to Micronaut Framework 5, this is an excellent opportunity to do so!

Please feel free to reach out to us if you need any assistance.