CVE-2020-7611: Objectcomputing Micronaut

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.

Affected products

• Objectcomputing Micronaut: before 1.2.11 (fixed in 1.2.11); from 1.3.0, before 1.3.2 (fixed in 1.3.2)

Published 2020-03-30. Last modified 2026-06-17.