Skip to content

Vendor

io.micronaut.security vulnerabilities

1 published CVE affecting io.micronaut.security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of io.micronaut.security alerts

Products

Latest io.micronaut.security CVEs

Newest publication first

  1. CVE-2023-36820 micronaut security has invalid IdTokenClaimsValidator logic on aud

    Published
    MediumCVSS 6.5 EPSS 0.53%

    Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup u...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.