Infinite loop Affecting io.micronaut:micronaut-http-client package, versions [,3.10.7)[4.0.0-M1,4.10.24)[5.0.0-M1,5.0.1)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JAVA-IOMICRONAUT-17912690
- published9 Jul 2026
- disclosed9 Jul 2026
- creditsdelamo
Introduced: 9 Jul 2026
CVE NOT AVAILABLE CWE-835 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade io.micronaut:micronaut-http-client to version 3.10.7, 4.10.24, 5.0.1 or higher.
Overview
io.micronaut:micronaut-http-client is a modern, JVM-based, full stack microservices framework designed for building modular, easily testable microservice applications.
Affected versions of this package are vulnerable to Infinite loop due to the lack of a maximum redirect count in the process handling HTTP redirections. An attacker can exhaust system resources and cause service disruption by triggering an infinite redirect loop.