Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is keyed by (Locale, baseName) where the locale originates from the HTTP Accept-Language header. In applications that explicitly register a ResourceBundleMessageSource bean and serve HTML error responses, an unauthenticated attacker can exhaust heap memory by sending requests with large numbers of unique Accept-Language values, each causing a new entry in the unbounded bundleCache. This vulnerability is fixed in 4.10.22.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | General1 |
| 2026-05-13 | 1 | Disclosure1 |
CVE-2026-44242 Denial of Service via Unbounded Bundle Cache in Micronaut Framework Before 4.10.22 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44242
Post summary
The text announces CVE‑2026‑44242, describing a denial‑of‑service vulnerability in Micronaut Framework versions prior to 4.10.22 due to an unbounded bundle cache.
CVE-2026-44242 Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is key… https://www.cve.org/CVERecord?id=CVE-2026-44242
Post summary
The text mentions CVE-2026-44242 in the Micronaut framework, noting a version issue, but offers no further technical detail, PoC, or mitigation information.