Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7-eap74-els-openjdk8-openshift-rhel8/jboss-eap-7-eap74-els-openjdk8-openshift-rhel8

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX AddressCVE-2026-59919 · GHSA-WH89-7897-X99H io.netty:netty-codec-haproxyCryostat 4/netty-codec-haproxy MavenRed Hat Medium Fix reported
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)CVE-2026-56819 · GHSA-93WV-JW9V-4972 io.netty:netty-codec-http2OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing BypassCVE-2026-59900 · GHSA-C69G-56F8-XWQJ io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory ExhaustionCVE-2026-55851 · GHSA-Q6CQ-MHR2-JMR5 io.netty:netty-codec-haproxyOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty: STOMP CONNECT Frame Header Injection in NettyCVE-2026-59920 · GHSA-3G8R-4PFX-JMFH io.netty:netty-codec-stompRed Hat Data Grid 8/netty-codec-stomp MavenRed Hat Medium Fix reported
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationCVE-2026-59898 · GHSA-4MP9-239F-G9HG io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: Security Control Bypass via CORS Short-Circuit FailureCVE-2026-56746 · GHSA-6CQP-G7GG-8HR5 io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat Medium Fix reported
Netty SPDY SETTINGS frame count materializes unbounded settings mapCVE-2026-55831 · GHSA-6JQX-86GH-F27W io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategyCVE-2026-59888 · GHSA-3PJW-73GF-8QR5 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat Medium Fix reported
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateCVE-2026-56818 · GHSA-P9JM-Q85P-7MCP io.netty:netty-codec-redisRed Hat Data Grid 8/netty-codec-redis MavenRed Hat Medium Fix reported
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoderCVE-2026-59921 · GHSA-GCJF-9MGH-3P7G io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of ServiceCVE-2026-59899 · GHSA-Q4F6-JM68-57WW io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat Medium Fix reported
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncationCVE-2026-55833 · GHSA-MVH2-CRG5-V77C io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handlingCVE-2026-56817 · GHSA-4QHR-G3C6-FCFX io.netty:netty-codec-xmlRed Hat JBoss Enterprise Application Platform 7/eap74-els-openjdk11-openshift-rhel8/eap74-els-openjdk11-openshift-rhel8 MavenRed Hat High Fix reported
jansi: org.fusesource.jansi/jansi: Jansi: Heap buffer overflow leads to Denial of ServiceCVE-2026-8484 Cryostat 4/jansiExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Red Hat Medium No fix reported
wildfly-core: Path Traversal on WildFly Domain ControllerCVE-2026-17614 Red Hat JBoss Enterprise Application Platform 7/eap74-els-openjdk11-openshift-rhel8/eap74-els-openjdk11-openshift-rhel8Red Hat JBoss Enterprise Application Platform 7/eap74-els-openjdk17-openshift-rhel8/eap74-els-openjdk17-openshift-rhel8 Red Hat Medium No fix reported
org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessageCVE-2026-66909 Red Hat JBoss Enterprise Application Platform 7/cxf-rt-transports-jmsRed Hat JBoss Enterprise Application Platform 7/cxf Red Hat High No fix reported
wildfly-platform-mbean: wildfly-platform-mbean: RBAC sensitive attribute read bypass for platform RuntimeMxBeanCVE-2026-19610 Red Hat JBoss Enterprise Application Platform 7/eap74-els-openjdk11-openshift-rhel8/eap74-els-openjdk11-openshift-rhel8Red Hat JBoss Enterprise Application Platform 7/eap74-els-openjdk17-openshift-rhel8/eap74-els-openjdk17-openshift-rhel8 Red Hat Medium No fix reported