Red Hat build of Apache Camel for Spring Boot 4/netty-handler-ssl-ocsp

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: TOCTOU in OcspServerCertificateValidatorCVE-2026-56822 · GHSA-WC96-39FC-566F	io.netty:netty-handler-ssl-ocsp Red Hat Data Grid 8/netty-handler-ssl-ocsp	MavenRed Hat	High	Fix reported	2026-09-10
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidatorCVE-2026-56821 · GHSA-G7HG-VRCF-MVMR	io.netty:netty-handler-ssl-ocsp Red Hat Data Grid 8/netty-handler-ssl-ocsp	MavenRed Hat	High	Fix reported	2026-09-10
io.netty/netty-handler-ssl-ocsp: Netty: OCSP Validation Silently Skipped When a Response Omits the Optional nextUpdate FieldCVE-2026-93493	Red Hat build of Apache Camel for Spring Boot 4/netty-handler-ssl-ocsp	Red Hat	Medium	No fix reported	Not recorded
io.netty/netty-handler-ssl-ocsp: Netty: Missing Extended Key Usage (EKU) check in OCSP Client allows certificate revocation bypassCVE-2026-93578	Red Hat build of Apache Camel for Spring Boot 4/netty-handler-ssl-ocsp	Red Hat	Medium	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded