Security
فارسی
All products

Red Hat Satellite 6/satellite-capsule:el8/puppetserver

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Eclipse Jetty: Path parameter traversalCVE-2026-8384 · GHSA-W7X5-G22V-XQHR org.eclipse.jetty:jetty-utilOpenShift Developer Tools and Services/jenkins MavenRed Hat Medium Fix reported
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-2332 · GHSA-355H-QMC2-WPWF org.eclipse.jetty:jetty-httpOpenShift Developer Tools and Services/jenkins MavenRed Hat High Fix reported
Logback allows an attacker to instantiate classes already present on the class pathCVE-2026-1225 · GHSA-QQPG-MVQG-649V ch.qos.logback:logback-coreLogging Subsystem for Red Hat OpenShift/logback-core MavenRed Hat Low Fix reported
QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processingCVE-2025-11226 · GHSA-25QH-J22F-PWP8 ch.qos.logback:logback-coreLogging Subsystem for Red Hat OpenShift/logback-core MavenRed Hat Medium Fix reported
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V commons-lang:commons-langorg.apache.commons:commons-lang3 MavenRed Hat Medium Fix reported
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headersCVE-2025-48976 · GHSA-VV7R-C36W-3PRJ commons-fileupload:commons-fileuploadorg.apache.commons:commons-fileupload2-core MavenRed Hat High Fix reported
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core MavenRed Hat Medium Fix reported
JRuby-OpenSSL has hostname verification disabled by defaultCVE-2025-46551 · GHSA-72QJ-48G4-5XGX org.jruby:jrubyrubygems:jruby-openssl MavenRed HatRubyGems Medium Fix reported