Red Hat Build Of Apache Camel 4 For Quarkus 3
Related 30slug: red-hat-build-of-apache-camel-4-for-quarkus-3
No explanation yet for this tag.
Vulnerabilities related to Red Hat Build Of Apache Camel 4 For Quarkus 3 30
- High 7.7 Quarkusの管理インターフェースで認可を回避される脆弱性 Quarkusのquarkus-vertx-httpに、管理インターフェースで認可の判定が誤ったパスに適用される脆弱性が見つかりました。認可を回避され、管理用のエンドポイントに不正にアクセスされるおそれがあり、CVSSの基本値は7.7（高）です。修正版の情報は確認できていないため、最新の情報を確認してください。 CVE-2026-107912
- Medium 5.3 A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a... CVE-2026-120971
- Medium 4.3 A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested... CVE-2026-119542
- High 7.5 Vulnerability in SmallRye Fault Tolerance library CVE-2026-94449
- Medium 6.5 A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this... Vulnerability reported (CVE-2026-93574). Risk of unauthorized operations or information disclosure. CVE-2026-93574
- Medium 6.5 Vulnerability in Netty's HTTP/1 decoder CVE-2026-93562
- Medium 6.1 Cross-Site Scripting (XSS) in Quarkus Qute template engine Cross-site scripting in Quarkus Qute template engine (CVE-2026-93432). Risk of unauthorized operations or information disclosure. CVE-2026-93432
- Medium 6.5 Vulnerability in Netty's HTTP/2 stack CVE-2026-93579
- Medium 6.5 Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling Vulnerability reported (CVE-2026-93573). Risk of unauthorized operations or information disclosure. CVE-2026-93573
- High 8.2 HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request... Vulnerability reported (CVE-2026-93569). Data can be tampered with by attackers. CVE-2026-93569
- High 7.5 HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests Vulnerability reported (CVE-2026-93568). Data can be tampered with by attackers. CVE-2026-93568
- High 7.5 HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled ... Vulnerability reported (CVE-2026-93567). Data can be tampered with by attackers. CVE-2026-93567
- Medium 6.5 ### Summary Netty skips strict chunk size line validation when the line has no chunk extension (`... Vulnerability reported (CVE-2026-93566). Risk of unauthorized operations or information disclosure. Exploitable via GET /smuggled. CVE-2026-93566
- High 7.5 ### Summary `RtspMethods.valueOf()` silently strips trailing control bytes (any character with... Vulnerability reported (CVE-2026-93565). Data can be tampered with by attackers. Exploitable via RtspDecoder. CVE-2026-93565
- High 7.5 HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (incomplete fix of PR #16881) Vulnerability reported (CVE-2026-93564). Risk of unauthorized operations or information disclosure. CVE-2026-93564
- High 7.5 Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service Vulnerability reported (CVE-2026-93558). Risk of unauthorized operations or information disclosure. CVE-2026-93558
- Medium 5.3 Vulnerability in Netty's HTTP/2 HpackEncoder CVE-2026-93492
- High 7.5 Vulnerability in Netty's HttpServerCodec CVE-2026-93491
- High 7.5 Vulnerability in Netty CVE-2026-93488
- High 7.5 Vulnerability in Quarkus HTTP security CVE-2026-87743
- High 7.5 Vulnerability in RESTEasy's IIOImageProvider CVE-2026-89059
- High 7.4 Vulnerability in RESTEasy's CorsFilter CVE-2026-89058
- High 7.5 XXE (XML External Entity) in RESTEasy's SourceProvider Vulnerability in RESTEasy's SourceProvider (CVE-2026-17615). Confidential information can be exposed externally. CVE-2026-17615
- High 7.4 Vulnerability in WildFly Elytron CVE-2026-19611
- High 7.4 Vulnerability in Quarkus-HTTP CVE-2024-12397
- Medium 5.3 Vulnerability in Undertow CVE-2024-3653
- Medium 5.4 A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support… Vulnerability reported (CVE-2024-1300). Risk of unauthorized operations or information disclosure. CVE-2024-1300
- Medium 6.5 Vulnerability in Eclipse Vert.x toolkit CVE-2024-1023
- High 7.5 Vulnerability in Undertow CVE-2024-1635
- Medium 4.4 Infinispan: circular reference on marshalling leads to dos A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service. CVE-2023-5236