Security
English
همهٔ محصولات

Red Hat build of Apache Camel for Spring Boot 4/rhaf-camel-maven-repository.zip

Red Hat · بسته
9 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the processCVE-2026-101911 · GHSA-H3MG-XC3C-68PW ip-addressCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
qs array-limit bypass via bracket-key comma parsingCVE-2026-82562 · GHSA-X5FP-WJ9C-MXMX qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 npmRed Hat متوسط اصلاح گزارش شده
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS ConditionCVE-2026-18401 · GHSA-72HV-8253-57QQ com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat متوسط اصلاح گزارش شده
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via uncontrolled transfer framesCVE-2026-66277 Red Hat AMQ Broker 7/amq-broker-bin.zipRed Hat AMQ Broker 7/amq-broker-maven-repository.zip Red Hat متوسط اصلاح اعلام نشده
http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validationCVE-2026-93750 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 Red Hat متوسط اصلاح اعلام نشده
qs: qs: Query parameter injection via unencoded empty array keysCVE-2026-110910 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9Cost Management On Premise/costmanagement/costmanagement-ui-rhel10 Red Hat کم اصلاح اعلام نشده