CVE-2026-44241

{
  "id": "CVE-2026-44241",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T22:16:35.473",
  "lastModified": "2026-10-26T14:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, 3.10.6, and 3.8.14, TimeConverterRegistrar caches DateTimeFormatter instances in an unbounded ConcurrentHashMap<String, DateTimeFormatter> whose key is derived from the @Format annotation pattern concatenated with the locale from the HTTP Accept-Language header. Because Locale.forLanguageTag() accepts arbitrary BCP 47 private-use extensions (en-x-a001, en-x-a002, …), an unauthenticated attacker can generate an unlimited number of unique cache keys by sending requests with novel locale tags, growing the cache until heap memory is exhausted and the JVM crashes. This vulnerability is fixed in 4.10.22, 3.10.6, and 3.8.14."
    },
    {
      "lang": "es",
      "value": "Micronaut Framework es un framework Java full stack basado en JVM diseñado para construir aplicaciones JVM modulares y fácilmente testeables. Desde la versión 4.3.0 hasta antes de la 4.10.22, TimeConverterRegistrar almacena en caché instancias de DateTimeFormatter en un ConcurrentHashMap<String, DateTimeFormatter> sin límites, cuya clave se deriva del patrón de la anotación @Format concatenado con la configuración regional (locale) de la cabecera HTTP Accept-Language. Debido a que Locale.forLanguageTag() acepta extensiones de uso privado BCP 47 arbitrarias (en-x-a001, en-x-a002, ...), un atacante no autenticado puede generar un número ilimitado de claves de caché únicas enviando solicitudes con nuevas etiquetas de configuración regional, haciendo crecer la caché hasta que la memoria del montón (heap) se agote y la JVM se bloquee. Esta vulnerabilidad está corregida en la versión 4.10.22."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "micronaut-projects",
          "product": "micronaut-core",
          "versions": [
            {
              "version": ">= 4.3.0, < 4.10.22",
              "status": "affected"
            },
            {
              "version": ">= 3.10.0, < 3.10.6",
              "status": "affected"
            },
            {
              "version": "< 3.8.14",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T15:29:50.739699Z",
          "id": "CVE-2026-44241",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/commit/48f05ae8dc4157816fe0050c5cf730be7d44f8b3",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/commit/c2048ab740c2efdfe227813f203176e0ef93f892",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/commit/c6ca8782de7338732e887d090f38c9e941bcb284",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/releases/tag/v3.10.6",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/releases/tag/v3.8.14",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/releases/tag/v4.10.22",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-8hjv-92q9-g4xj",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-8hjv-92q9-g4xj",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}