Maven/io.micronaut:micronaut-http-client: medium 6.8
Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers
Action: Upgrade io.micronaut:micronaut-http-client to 3.10.6 (3.x), 4.10.24 (4.x) or 5.0.1 (5.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.8 | 3.10.6 | - |
| 4.0.0-M1 | 4.10.24 | - |
| 5.0.0-M1 | 5.0.1 | - |
Fixed versions
| 3.10.6 | 4.10.24 | 5.0.1 |
Sources
- osv: GHSA-q6gh-6v2r-hjv3
- https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-q6gh-6v2r-hjv3
- https://github.com/micronaut-projects/micronaut-core/commit/64e539736b8168f201d868b02ace50fe14f57418
- https://github.com/micronaut-projects/micronaut-core/commit/70cab4b44fbf985faba2846091f2356b5bd70719
- https://github.com/micronaut-projects/micronaut-core/commit/9770328999f490bdfbb9e25addd45bf73d4a173a
- https://github.com/micronaut-projects/micronaut-core
published · modified · JSON