| Bouncy Castle has an LDAP injectionCVE-2026-0636 · GHSA-C3FC-8QFF-9HWX |
org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocksCVE-2025-14813 · GHSA-574F-3G2M-X479 |
org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Eclipse Jetty: HTTP Authority/Host mismatchCVE-2026-6790 · GHSA-7P3P-8QV8-M2VH |
org.eclipse.jetty:jetty-serverOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxCVE-2026-41841 · GHSA-MQ64-J8F9-9GCJ |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853 · GHSA-CJPG-RGQ5-FR37 |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serializationCVE-2026-49844 · GHSA-QV9R-C865-CP47 |
org.apache.logging.log4j:log4j-apiCryostat 4/log4j-api |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Vert.x has a DoS via unbounded server-side SNI SslContext cache growthCVE-2026-6860 · GHSA-3G76-F9XQ-8VP6 |
io.vertx:vertx-coreCryostat 4/vertx-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modulesCVE-2026-5588 · GHSA-WG6Q-6289-32HP |
org.bouncycastle:bcpkix-debug-jdk14org.bouncycastle:bcpkix-debug-jdk15to18 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configurationCVE-2026-34477 · GHSA-6HG6-V5C8-FPHQ |
org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-2-2 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET RequestsCVE-2026-3260 · GHSA-3X3V-W654-M28M |
io.undertow:undertow-coreRed Hat Data Grid 8/undertow-core |
MavenRed Hat |
متوسط
|
اصلاح اعلام نشده |
|
| Apache Log4j does not verify the TLS hostname in its Socket AppenderCVE-2025-68161 · GHSA-VC5P-V9HR-52MJ |
org.apache.logging.log4j:log4j-coreLogging Subsystem for Red Hat OpenShift/log4j-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden DirectoriesCVE-2025-11965 · GHSA-H5FG-JPGR-RV9C |
io.vertx:vertx-webCryostat 4/vertx-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messagesCVE-2025-41254 · GHSA-7FCH-4F2F-JCGM |
org.springframework:spring-websocketLogging Subsystem for Red Hat OpenShift/spring-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC |
org.bouncycastle:bc-fipsCryostat 4/bcpkix-jdk18on |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Spring Framework MVC Applications Path Traversal VulnerabilityCVE-2025-41242 · GHSA-R936-GWX5-V52F |
org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
