| Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp has an Improper Input Validation vulnerabilityCVE-2026-49432 · GHSA-XJWQ-9JW5-JF7W |
org.apache.activemq:activemq-allorg.apache.activemq:activemq-stomp |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerabilityCVE-2026-53917 · GHSA-F77W-PX59-CQF5 |
org.apache.activemq:activemq-allorg.apache.activemq:activemq-broker |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerabilityCVE-2026-49434 · GHSA-H5GM-RVW6-2XPX |
org.apache.activemq:activemq-allorg.apache.activemq:activemq-broker |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-34479 · GHSA-H383-GMXW-35V2 |
org.apache.logging.log4j:log4j-coreRed Hat Data Grid 8/log4j-1.2-api |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Boot: Predictable Temp Directory in Artemis Auto-configurationCVE-2026-41001 · GHSA-GGG2-9786-HWC8 |
org.springframework.boot:spring-boot-autoconfigureRed Hat AMQ Clients/spring-boot |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Spring Framework Arbitrary Method Invocation in SpEL ExpressionsCVE-2026-41852 · GHSA-9F52-RJQV-25QV |
org.springframework:spring-expressionOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configurationCVE-2026-34477 · GHSA-6HG6-V5C8-FPHQ |
org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-2-2 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 |
org.springframework:spring-webfluxorg.springframework:spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Logback allows an attacker to instantiate classes already present on the class pathCVE-2026-1225 · GHSA-QQPG-MVQG-649V |
ch.qos.logback:logback-coreLogging Subsystem for Red Hat OpenShift/logback-core |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Apache Log4j does not verify the TLS hostname in its Socket AppenderCVE-2025-68161 · GHSA-VC5P-V9HR-52MJ |
org.apache.logging.log4j:log4j-coreLogging Subsystem for Red Hat OpenShift/log4j-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processingCVE-2025-11226 · GHSA-25QH-J22F-PWP8 |
ch.qos.logback:logback-coreLogging Subsystem for Red Hat OpenShift/logback-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messagesCVE-2025-41254 · GHSA-7FCH-4F2F-JCGM |
org.springframework:spring-websocketLogging Subsystem for Red Hat OpenShift/spring-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework MVC Applications Path Traversal VulnerabilityCVE-2025-41242 · GHSA-R936-GWX5-V52F |
org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V |
commons-lang:commons-langorg.apache.commons:commons-lang3 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Spring Framework vulnerable to a reflected file download (RFD)CVE-2025-41234 · GHSA-6R3C-XF4W-JXJM |
org.springframework:spring-webOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG |
com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| snappy-java's unchecked chunk length leads to DoSCVE-2023-34455 · GHSA-QCWQ-55HX-V3VH |
org.xerial.snappy:snappy-javaOpenShift Serverless/snappy-java |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
