io.micronaut:micronaut-http-server@3.6.1 vulnerabilities
-
latest version
4.4.9
-
latest non vulnerable version
-
first published
6 years ago
-
latest version published
10 days ago
-
licenses detected
- [1.0.0.RC3,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the io.micronaut:micronaut-http-server package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to External Control of System or Configuration Setting due to enabled but unsecured management endpoints, susceptible to drive-by localhost attacks. Note: While not typical of a production application, these attacks may have more impact on a development environment where such endpoints may be flipped on without much thought. A malicious/compromised website can make HTTP requests to How to fix External Control of System or Configuration Setting? Upgrade |
[,3.8.3)
|