CVE-2026-44242
LowAdvisory
Published 6 May 2026In the index since 8 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.7
- base score, highest
- EPSS
- 0.002
- 11th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 12
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Micronaut has Unbounded `bundleCache` in `ResourceBundleMessageSource` that Allows Memory Exhaustion via `Accept-Language` Header
Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| micronaut-injectmaven | 3.8.6, 3.10.3, 3.10.4, 4.10.11+2 more | 3.8.14, 3.10.6, 4.10.22 | 16 |
- OSV records
- GHSA-3rfq-4wpf-qqw3
Charts affected
12 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airbyteairbyte-v2Verified publisher | 2.2.0 | 6 of 10See more | 12,473 |
| airbyte-data-planeairbyte-v2Verified publisher | 2.2.0 | 1 of 1See more | 790 |
| credentials-config-servicefiware | 2.6.4 | 1 of 1See more | 2,293 |
| trusted-issuers-listfiware | 0.18.7 | 1 of 1See more | 1,701 |
| trusted-issuers-registryfiware | 0.13.0 | 1 of 1See more | 7,087 |
| mod-agreementsfolio-org | 0.1.32 | 1 of 1See more | 1,874 |
| mod-licensesfolio-org | 0.1.32 | 1 of 1See more | 1,760 |
| mod-oafolio-org | 0.1.2 | 1 of 1See more | 1,733 |
| mod-serials-managementfolio-org | 0.1.1 | 1 of 1See more | 1,733 |
| mod-service-interactionfolio-org | 0.1.6 | 1 of 1See more | 1,733 |
| gridgain9gridgainVerified publisher | 1.1.10 | 1 of 2See more | 3,199 |
| rundecksvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 18,756 |
Container images carrying it
16 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| airbyte/ | 119be7bfb719 | micronaut-inject | 4.10.22 | 2 |
| airbyte/ | f71cf4e185d5 | micronaut-inject | 4.10.22 | 1 |
| airbyte/ | d97b67a1346d | micronaut-inject | 4.10.22 | 1 |
| airbyte/ | 70e125498a1c | micronaut-inject | 4.10.22 | 1 |
| airbyte/ | 8060b88b29c8 | micronaut-inject | 4.10.22 | 1 |
| airbyte/ | 42093cff86e9 | micronaut-inject | 4.10.22 | 1 |
| folioci/ | 29c3f233a498 | micronaut-inject | 3.10.6 | 1 |
| folioci/ | cfd6109bf477 | micronaut-inject | 3.10.6 | 1 |
| folioci/ | ae3b069d4ba5 | micronaut-inject | 3.10.6 | 1 |
| folioci/ | 571fa1ffe8c9 | micronaut-inject | 3.10.6 | 1 |
| folioci/ | f53c327a48e8 | micronaut-inject | 3.10.6 | 1 |
| gridgain/ | 95018390077b | micronaut-inject | 3.10.6 | 1 |
| svtechnmaa/ | 6e368ace0977 | micronaut-inject | 3.8.14 | 1 |
| quay.io/ | f2fbced76da8 | micronaut-inject | 4.10.22 | 1 |
| quay.io/ | 3c886ce5c056 | micronaut-inject | 4.10.22 | 1 |
| quay.io/ | a8a9ec461034 | micronaut-inject | 3.10.6 | 1 |