#4966·antlr4

Is there a patched release planned for ANTLR 4

Author: jayavelu-mnsCreated Aug 3, 2026Updated Aug 11, 2026

Hi ANTLR maintainers,

Our security scanning tool (Snyk) has reported CVE's against org.antlr:antlr4:4.13.2.

The dependency is introduced transitively through Micronaut Data:

promotion-authoring
└── io.micronaut.data:micronaut-data-processor
    └── org.antlr:antlr4:4.13.2

Screenshot:

Image

We also verified that the latest available version of io.micronaut.data:micronaut-data-processor (5.0.6) still depends on org.antlr:antlr4:4.13.2, so upgrading Micronaut does not currently resolve the vulnerability.