CVE-2023-46131: Grails

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.

Affected products

• Grails Grails: before 3.3.17 (fixed in 3.3.17); from 4.0.0, before 4.1.3 (fixed in 4.1.3); from 5.0.0, before 5.3.4 (fixed in 5.3.4); from 6.0.0, before 6.1.0 (fixed in 6.1.0)

Published 2023-12-21. Last modified 2026-06-17.