All products

Red Hat JBoss Enterprise Application Platform 8/org.jboss.eap-jboss-eap-xp

Red Hat · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET RequestsCVE-2026-3260 · GHSA-3X3V-W654-M28M io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core MavenRed Hat Medium No fix reported
jose4j is vulnerable to DoS via compressed JWE contentCVE-2024-29371 · GHSA-3677-XXCR-WJQV org.bitbucket.b_c:jose4jOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat High Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Apache CXF: Denial of Service vulnerability with temporary filesCVE-2025-23184 · GHSA-FH5R-CRHR-QRRQ org.apache.cxf:cxf-coreLogging Subsystem for Red Hat OpenShift/org.apache.cxf/cxf-core MavenRed Hat High Fix reported