A vulnerability was found in micronaut-projects micronaut-core up to 3.10.4/4.10.15. It has been classified as problematic. The impacted element is the function
theJsonBeanPropertyBinder::expandArrayToThreshold. This manipulation causes infinite loop.
This vulnerability appears as CVE-2026-33013. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
