Security
فارسی
All products

Red Hat Certificate System 10/redhat-pki:10/jss

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V commons-lang:commons-langorg.apache.commons:commons-lang3 MavenRed Hat Medium Fix reported
Apache Tomcat Session Fixation vulnerabilityCVE-2025-55668 · GHSA-23HV-MWM6-G8JF org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat - Security constraints not correctly appliedCVE-2026-43515 · GHSA-5M62-PW8W-7W9F org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat - AJP secret compared in non-constant timeCVE-2026-43514 · GHSA-9M89-8FRQ-C98C org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Low Fix reported
Apache Tomcat - WebSocket authentication header exposureCVE-2026-42498 · GHSA-FV25-8XCX-GQJC org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat Vulnerable to Improper Resource Shutdown or ReleaseCVE-2025-61795 · GHSA-HGRR-935X-PQ79 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Low Fix reported
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control SequencesCVE-2025-55754 · GHSA-VFWW-5HM6-HX2J org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Low Fix reported
jss: jss: JSSTrustManager does not verify NSS trust flags on CA certificatesCVE-2026-78323 Red Hat Certificate System 10/redhat-pki:10/jssRed Hat Certificate System 11/jss Red Hat Medium No fix reported