Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Micronaut libraries could let attackers alter data
published 2 months ago
Summary
Several Micronaut components, including core and context libraries, contained a flaw that could let a malicious user change information sent or received by an application. The issue has been fixed in the updated Micronaut package version 3.6.0‑tuxcare.2. Upgrade to that version or later to protect your systems.
What to do
- Update micronaut io.micronaut:micronaut-aop to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-bom to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-buffer-netty to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-context to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-core to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-core-reactive to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-function to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-function-client to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-function-web to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-graal to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-client to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-client-core to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-netty to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-server to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-server-netty to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-http-validation to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject-groovy to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject-groovy-test to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject-java to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject-java-test to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-inject-kotlin-test to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-jackson-core to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-jackson-databind to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-json-core to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-management to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-messaging to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-parent to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-router to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-runtime to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-runtime-osx to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-session to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-validation to version 3.6.0-tuxcare.2.
- Update micronaut io.micronaut:micronaut-websocket to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-function to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-function-client to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-function-web to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-client to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-client-core to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-netty to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-server to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-server-netty to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-http-validation to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-jackson-core to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-jackson-databind to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-json-core to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-management to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-messaging to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-runtime to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-runtime-osx to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-session to version 3.6.0-tuxcare.2.
- Update io.micronaut:micronaut-websocket to version 3.6.0-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-aop |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-bom |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-buffer-netty |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-context |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-core |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-core-reactive |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-function |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-function-client |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-function-web |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-graal |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-client |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-client-core |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-netty |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-server |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-server-netty |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-http-validation |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject-groovy |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject-groovy-test |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject-java |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject-java-test |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-inject-kotlin-test |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-jackson-core |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-jackson-databind |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-json-core |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-management |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-messaging |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-parent |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-router |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-runtime |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-runtime-osx |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-session |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-validation |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | micronaut | io.micronaut:micronaut-websocket |
< 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-function |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-function-client |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-function-web |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-client |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-client-core |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-netty |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-server |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-server-netty |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-http-validation |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-jackson-core |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-jackson-databind |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-json-core |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-management |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-messaging |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-runtime |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
Showing 50 of 53. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | io.micronaut:micronaut-runtime-osx |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-session |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
| TuxCare:Maven | – | io.micronaut:micronaut-websocket |
>= 3.6.0, < 3.6.0-tuxcare.2 Fix: upgrade to 3.6.0-tuxcare.2
|
Original advisory text
TuxCare security update for io.micronaut:micronaut-json-core (1 CVE)
TuxCare rebuilt io.micronaut:micronaut-json-core to address 1 CVE. Fixed in 3.6.0-tuxcare.2.
Timeline
Published25 Aug 2026
Updated2 Nov 2026
First seen26 Aug 2026
Sources
CLSA-2026-1787664048 · OSV
Track software like this
Free during beta