description: All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.
problem types: HTTP Request Header Injection
affected:
{
product: io.micronaut:micronaut-http-client
vendor: n/a
versions:
status: affected, version: all versions before 1.2.11
status: affected, version: all versions from 1.3.0 before 1.3.2
}