Micronaut Framework 4.10.21 Released!
The Micronaut Foundation is excited to announce the release of Micronaut Framework 4.10.21!
Micronaut Framework 4.10.21 is a security release. It includes Micronaut Core 4.10.31, which updates two managed dependencies to security releases:
- Jackson is updated to
2.21.7. This Jackson patch release fixes several vulnerabilities injackson-coreandjackson-databind, including unbounded growth of the type id cache inTypeDeserializer, quadratic forward-reference resolution in Collection and Map deserializers, and parser issues that could lead to excessive resource consumption. - Netty is updated to
4.2.19.Final. This Netty security release fixes several vulnerabilities, including HTTP request/response smuggling and unbounded resource consumption in the HTTP, HTTP/2, and HTTP/3 codecs.
We strongly recommend that all Micronaut Framework 4 users update to Micronaut Framework 4.10.21.
If you are using Micronaut Framework 5, update to Micronaut Framework 5.2.2, which also updates Netty to 4.2.19.Final.
If you haven’t yet updated to Micronaut Framework 5, this is an excellent opportunity to do so!
Please feel free to reach out to us if you need any assistance.