Micronaut posts tagged security

Micronaut Framework 5.2.3 is a security release with fixes in Micronaut Core and Security, plus updates to Data, Object Storage, and Serialization.

Micronaut Framework 3.10.15 is a security release. Micronaut Core 3.10.15 updates managed Netty to 4.1.139.Final, a Netty security release that fixes several vulnerabilities.

Micronaut Framework 4.10.21 is a security release. It includes Micronaut Core 4.10.31, which updates Jackson to 2.21.7 and Netty to 4.2.19.Final, both security releases that fix several vulnerabilities.

Micronaut Framework 5.2.2 is a security release. Its highlight is Micronaut Core 5.2.15 updating Netty to 4.2.19.Final, which fixes several vulnerabilities. It also includes Micronaut Data 5.2.2 and Micronaut Test Resources 4.3.1.

Micronaut framework 5.1.5 includes Micronaut Core 5.1.15, which updates Netty to 4.2.18.Final, a release containing several security fixes.

Micronaut framework 5.1.4 includes Micronaut Core 5.1.14 and Micronaut Data 5.1.4, which address several security advisories.

The Micronaut® framework engineering team confirmed a security vulnerability in the management module, discovered by Joseph Beeton of Contrast Security, Inc. This vulnerability is assigned the identifier CVE-2024-23639. Summary A susceptible environment is where the application runs locally, management endpoints are enabled but unsecured, and the local host accesses an unrelated but problematic website. This...

The Micronaut team confirmed a security vulnerability found in the Micronaut Security Oauth2 dependency, identified and reported by Tommy Li. This vulnerability is assigned the identifier CVE-2023-36820. Summary When using a vulnerable version of micronaut-security-oauth2, the IdTokenClaimsValidator skips aud claim validation if the same authorization server issues the token. Affected Versions Micronaut Security versions greater...

Our first training workshops for 2022 have just been added to the schedule!

The Micronaut team is excited to announce the release of Micronaut 2.2!

In this 1-hour on-demand webinar, Sergio del Amo demonstrates how to get the most out of the security capabilities at your disposal when building Micronaut applications.