Grails data binding causes JVM crash and/or other denial of service
ImpactA specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable.PatchesPatches are available for Grails 3 and later.WorkaroundsNo workaround is possible except to avoid data binding to request data.References[Blog post](https://grails.org/blog/2023-12-20-cve-data-binding-dos.html)[Discussion](https://github.com/grails/grails-core/issues/13302)[Mitre CVD record](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46131)