Security announcements and vulnerability fixes from the Micronaut project.https://micronaut.io/en-UShttps://micronaut.io/2026/09/11/micronaut-framework-5-1-5/https://micronaut.io/2026/09/11/micronaut-framework-5-1-5/Micronaut framework 5.1.5 includes Micronaut Core 5.1.15, which updates Netty to 4.2.18.Final, a release containing several security fixes.Fri, 11 Sep 2026 12:04:15 GMTrelease-announcementssecurity-announcementsreleasesecurityhttps://micronaut.io/2026/09/09/micronaut-framework-5-1-4/https://micronaut.io/2026/09/09/micronaut-framework-5-1-4/Micronaut framework 5.1.4 includes Micronaut Core 5.1.14 and Micronaut Data 5.1.4, which address several security advisories.Wed, 09 Sep 2026 18:21:20 GMTrelease-announcementssecurity-announcementsreleasesecurityhttps://micronaut.io/2026/07/07/micronaut-framework-5-0-4-released/https://micronaut.io/2026/07/07/micronaut-framework-5-0-4-released/Micronaut framework 5.0.4 includes Micronaut Core and Netty 4.2.16, which fixes multiple CVEs.Tue, 07 Jul 2026 11:04:55 GMTrelease-announcementssecurity-announcementsreleasehttps://micronaut.io/2026/03/16/micronaut-framework-4-10-10-released/https://micronaut.io/2026/03/16/micronaut-framework-4-10-10-released/The Micronaut Foundation is excited to announce the release of Micronaut framework 4.10.10! It contains releases of Micronaut Core, and Micronaut Test. Potential denial of service attacks fixes Today, we published two security advisories that are fixed in Micronaut Core 4.10.10. Thus, strongly recommend that every user update to the latest version of Micronaut. DoS...Mon, 16 Mar 2026 10:01:54 GMTrelease-announcementssecurity-announcementsreleasehttps://micronaut.io/2024/02/08/micronaut-core-management-drive-by/https://micronaut.io/2024/02/08/micronaut-core-management-drive-by/The Micronaut® framework engineering team confirmed a security vulnerability in the management module, discovered by Joseph Beeton of Contrast Security, Inc. This vulnerability is assigned the identifier CVE-2024-23639. Summary A susceptible environment is where the application runs locally, management endpoints are enabled but unsecured, and the local host accesses an unrelated but problematic website. This...Thu, 08 Feb 2024 21:54:50 GMTsecurity-announcementssecurityhttps://micronaut.io/2023/10/17/micronaut-security-oauth2-improper-access-control-vulnerability/https://micronaut.io/2023/10/17/micronaut-security-oauth2-improper-access-control-vulnerability/The Micronaut team confirmed a security vulnerability found in the Micronaut Security Oauth2 dependency, identified and reported by Tommy Li. This vulnerability is assigned the identifier CVE-2023-36820. Summary When using a vulnerable version of micronaut-security-oauth2, the IdTokenClaimsValidator skips aud claim validation if the same authorization server issues the token. Affected Versions Micronaut Security versions greater...Tue, 17 Oct 2023 19:09:54 GMTsecurity-announcementssecurity