Maven/io.micronaut:micronaut-http-server-netty CVE-2021-32769: high 7.5, EPSS 1.73%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
Action: Upgrade io.micronaut:micronaut-http-server-netty to 2.5.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.9 | - |
Fixed versions
| 2.5.9 |
Sources
- osv: GHSA-cjx7-399x-p2rj
- https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-cjx7-399x-p2rj
- https://nvd.nist.gov/vuln/detail/CVE-2021-32769
- https://github.com/micronaut-projects/micronaut-core/commit/a0cfeb13bf1ef5d692d16d4a3b91b34b7456bb11
CVE-2021-32769 · published · modified · JSON