Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the unbounded `bundleCache` in `ResourceBundleMessageSource`. An attacker can cause memory exhaustion and degrade service availability by sending numerous HTTP requests with unique `Accept-Language` headers, each triggering a new cache entry. Note: This is only exploitable if the application explicitly registers a `ResourceBundleMessageSource` bean and serves HTML error responses. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `io.micronaut:micronaut-inject` to version 4.10.22, 5.0.0-M25 or higher.	[4.3.0,4.10.22)[5.0.0-M1,5.0.0-M25)

Allocation of Resources Without Limits or Throttling

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the unbounded bundleCache in ResourceBundleMessageSource. An attacker can cause memory exhaustion and degrade service availability by sending numerous HTTP requests with unique Accept-Language headers, each triggering a new cache entry.

Note:

This is only exploitable if the application explicitly registers a ResourceBundleMessageSource bean and serves HTML error responses.

How to fix Allocation of Resources Without Limits or Throttling?

Upgrade io.micronaut:micronaut-inject to version 4.10.22, 5.0.0-M25 or higher.

[4.3.0,4.10.22)[5.0.0-M1,5.0.0-M25)

Go back to all versions of this package