{"action":"Upgrade io.micronaut:micronaut-context to 3.8.14 (3.8.x), 3.10.6 (3.10.x) or 4.10.22 (4.10.x) or later.","affected":[{"fixed":"4.10.22","introduced":"4.3.0"},{"fixed":"3.10.6","introduced":"3.10.0"},{"fixed":"3.8.14","introduced":"0"}],"component":"io.micronaut:micronaut-context","cve_ids":["CVE-2026-44241"],"ecosystem":"Maven","epss":0.00636,"exploited":false,"fixed_versions":["4.10.22","3.10.6","3.8.14"],"ghsa_id":"GHSA-8hjv-92q9-g4xj","id":"tcs_01M5N8MWRKZ0VEE5EHF36Y74XZ","modified_at":"2026-07-10T00:15:09.355573702Z","published_at":"2026-05-06T20:00:22Z","references":["https://osv.dev/vulnerability/GHSA-8hjv-92q9-g4xj","https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-8hjv-92q9-g4xj","https://nvd.nist.gov/vuln/detail/CVE-2026-44241","https://github.com/micronaut-projects/micronaut-core/commit/48f05ae8dc4157816fe0050c5cf730be7d44f8b3","https://github.com/micronaut-projects/micronaut-core/commit/c2048ab740c2efdfe227813f203176e0ef93f892","https://github.com/micronaut-projects/micronaut-core/commit/c6ca8782de7338732e887d090f38c9e941bcb284","https://github.com/micronaut-projects/micronaut-core","https://github.com/micronaut-projects/micronaut-core/releases/tag/v3.10.6","https://github.com/micronaut-projects/micronaut-core/releases/tag/v3.8.14","https://github.com/micronaut-projects/micronaut-core/releases/tag/v4.10.22"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8hjv-92q9-g4xj","url":"https://osv.dev/vulnerability/GHSA-8hjv-92q9-g4xj"}],"summary":"Micronaut has unbounded `formattersCache` in `TimeConverterRegistrar` that Allows Memory Exhaustion via `Accept-Language` Header"}