CVE-2022-21700

Name of the Vulnerable Software and Affected Versions Micronaut versions prior to 3.2.7

Description Sending an invalid Content Type header leads to a memory leak in DefaultArgumentConversionContext as this type is erroneously used in static state.

Recommendations For versions prior to 3.2.7, update to Micronaut 3.2.7 or above to resolve the issue. As a temporary workaround, consider replacing the default content type binder in an existing Micronaut application with a custom implementation, such as the provided FixedRequestBinderRegistry class, to mitigate the issue.