{"action":"Upgrade io.micronaut:micronaut-http-client to 3.10.6 (3.x), 4.10.24 (4.x) or 5.0.1 (5.x) or later.","affected":[{"fixed":"3.10.6","introduced":"1.2.8"},{"fixed":"4.10.24","introduced":"4.0.0-M1"},{"fixed":"5.0.1","introduced":"5.0.0-M1"}],"component":"io.micronaut:micronaut-http-client","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["3.10.6","4.10.24","5.0.1"],"ghsa_id":"GHSA-q6gh-6v2r-hjv3","id":"tcs_01M5N98VSEXG5DT17DD08SNJEZ","modified_at":"2026-09-10T03:51:11.838696527Z","published_at":"2026-07-09T13:36:56Z","references":["https://osv.dev/vulnerability/GHSA-q6gh-6v2r-hjv3","https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-q6gh-6v2r-hjv3","https://github.com/micronaut-projects/micronaut-core/commit/64e539736b8168f201d868b02ace50fe14f57418","https://github.com/micronaut-projects/micronaut-core/commit/70cab4b44fbf985faba2846091f2356b5bd70719","https://github.com/micronaut-projects/micronaut-core/commit/9770328999f490bdfbb9e25addd45bf73d4a173a","https://github.com/micronaut-projects/micronaut-core"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-q6gh-6v2r-hjv3","url":"https://osv.dev/vulnerability/GHSA-q6gh-6v2r-hjv3"}],"summary":"Micronaut: DefaultHttpClient follows redirects, forwarding Authorization, Cookie, and Proxy-Authorization headers"}