Security
English
همهٔ محصولات

Red Hat Enterprise Linux 10/dogtag-pki

Red Hat · بسته
18 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)CVE-2026-54514 · GHSA-HGJ6-7826-R7M5 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat زیاد اصلاح گزارش شده
jackson-databind quadratic forward-reference completion CVE-2026-91777 · GHSA-CXP5-3PX4-PW24 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat زیاد اصلاح گزارش شده
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider ResolutionCVE-2026-19032 · GHSA-WJGM-6HV5-3CVF com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserializationCVE-2026-77310 · GHSA-VVGP-RFG2-7RR6 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategyCVE-2026-59888 · GHSA-3PJW-73GF-8QR5 com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnorePropertiesCVE-2026-54515 · GHSA-5JMJ-H7XM-6Q6V com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind MavenRed Hat متوسط اصلاح گزارش شده
Apache Tomcat Session Fixation vulnerabilityCVE-2025-55668 · GHSA-23HV-MWM6-G8JF org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat متوسط اصلاح گزارش شده
Apache Tomcat Vulnerable to Improper Resource Shutdown or ReleaseCVE-2025-61795 · GHSA-HGRR-935X-PQ79 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat کم اصلاح گزارش شده
Apache Tomcat Vulnerable to Relative Path TraversalCVE-2025-55752 · GHSA-WMWF-9CCG-FFF5 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat زیاد اصلاح گزارش شده
RHCS: Memory Leak During HTTPS Connection Leads to Denial of ServiceCVE-2026-12353 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat متوسط اصلاح اعلام نشده
pki-core: dogtag-pki: redhat-pki: pki-core: CA renewal request processing omits realm authorization check performed by enrollment pathCVE-2026-17039 Red Hat Certificate System 10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat کم اصلاح اعلام نشده
dogtag-pki: pki-core: redhat-pki: pki: ACME admin enable/disable endpoint authentication bypass via trailing slashCVE-2026-18047 Red Hat Certificate System 10/redhat-pki:10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat متوسط اصلاح اعلام نشده
dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirectsCVE-2026-18369 Red Hat Certificate System 10/redhat-pki:10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat متوسط اصلاح اعلام نشده
pki-core: dogtag-pki: Unauthenticated Dogtag CA REST API exposes Security Domain HostsCVE-2026-53682 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat متوسط اصلاح اعلام نشده
pki-core: dogtag-pki: empty request to Dogtag /ca/rest/certrequests causes HTTP 500, java exception, and stacktrace disclosureCVE-2026-11873 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat متوسط اصلاح اعلام نشده