| Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationCVE-2026-102554 · GHSA-XXPH-C9WW-HJ94 |
com.google.guava:guavaExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarationsCVE-2026-75140 · GHSA-65R4-943X-97JJ |
org.jsoup:jsoupExploit Intelligence/exploit-intelligence/agent-client-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind retains every unknown raw type ID CVE-2026-91776 · GHSA-WV8Q-QHHJ-9H54 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoSCVE-2026-68497 · GHSA-Q4XH-88C3-WMH7 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider ResolutionCVE-2026-19032 · GHSA-WJGM-6HV5-3CVF |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserializationCVE-2026-77310 · GHSA-VVGP-RFG2-7RR6 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506 · GHSA-QP49-QGX5-5M26 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 |
MavenRed Hat |
High
|
Fix reported |
|
| Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 |
MavenRed Hat |
Critical
|
Fix reported |
|
| Netty: Memory Exhaustion in SctpMessageCompletionHandlerCVE-2026-59902 · GHSA-2QJ4-MMR9-4V2F |
io.netty:netty-transport-sctpRed Hat Enterprise Linux AI (RHEL AI) 3/bazel6 |
MavenRed Hat |
High
|
Fix reported |
|
| Netty: Memory Leak in DNS Record Decoder via Malformed Domain NamesCVE-2026-73508 · GHSA-MFG7-5GFP-C4W3 |
io.netty:netty-codec-dnsExploit Intelligence/exploit-intelligence/agent-client-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Apache cxf-core: No restriction on attachment headers per messageCVE-2026-50645 · GHSA-GHVC-7HP8-2G2V |
org.apache.cxf:cxf-coreRed Hat Fuse 7/cxf-core |
MavenRed Hat |
High
|
Fix reported |
|
| Netty epoll transport denial of service via RST on half-closed TCP connectionCVE-2026-42577 · GHSA-RWM7-X88C-3G2P |
io.netty:netty-transport-classes-epollCryostat 4/cryostat/cryostat-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| org.apache.cxf/cxf: Apache CXF: Denial of Service via large attachmentsCVE-2026-54225 |
Red Hat Fuse 7/cxf-coreRed Hat JBoss Enterprise Application Platform 7/cxf-core |
Red Hat |
Low
|
No fix reported |
|
| wss4j: org.apache.wss4j/wss4j-ws-security-policy-stax: org.apache.wss4j/wss4j-ws-security-stax: org.apache.wss4j/wss4j: Apache WSS4J: Security policy bypass via STR-Transform referenceCVE-2026-92121 |
Red Hat Fuse 7/wss4j-ws-security-policy-staxRed Hat Fuse 7/wss4j-ws-security-stax |
Red Hat |
Medium
|
No fix reported |
|
| org.bouncycastle/bcpg-jdk18on: org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-lts8on: org.bouncycastle/bcpg-jdk15to18: org.bouncycastle/bcpg-jdk15on: Bouncy Castle: Integrity check bypass via truncated OpenPGP messagesCVE-2026-85515 |
OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins |
Red Hat |
Medium
|
No fix reported |
|
