| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| ch.qos.logback:logback-core |
CVE-2026-1225 |
LOW |
1.5.19 |
1.5.25 |
https://access.redhat.com/security/cve/CVE-2026-1225
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5
https://github.com/qos-ch/logback/issues/997
https://logback.qos.ch/news.html#1.5.25
https://nvd.nist.gov/vuln/detail/CVE-2026-1225
https://www.cve.org/CVERecord?id=CVE-2026-1225
|
| ch.qos.logback:logback-core |
CVE-2026-9828 |
LOW |
1.5.19 |
1.5.33 |
https://github.com/qos-ch/logback
https://logback.qos.ch/news.html#1.5.33
https://nvd.nist.gov/vuln/detail/CVE-2026-9828
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-72hv-8253-57qq |
MEDIUM |
2.18.4.1 |
2.21.1, 2.18.6 |
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf
https://github.com/FasterXML/jackson-core/pull/1555
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
HIGH |
2.18.4 |
2.18.8, 3.1.4, 2.21.4 |
https://access.redhat.com/security/cve/CVE-2026-54512
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5
https://github.com/FasterXML/jackson-databind/issues/5988
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
https://nvd.nist.gov/vuln/detail/CVE-2026-54512
https://www.cve.org/CVERecord?id=CVE-2026-54512
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
HIGH |
2.18.4 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/security/cve/CVE-2026-54513
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5
https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e
https://github.com/FasterXML/jackson-databind/issues/5981
https://github.com/FasterXML/jackson-databind/issues/5983
https://github.com/FasterXML/jackson-databind/pull/5984
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
https://nvd.nist.gov/vuln/detail/CVE-2026-54513
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json
https://www.cve.org/CVERecord?id=CVE-2026-54513
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
MEDIUM |
2.18.4 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/security/cve/CVE-2026-54514
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4
https://github.com/FasterXML/jackson-databind/pull/5951
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
https://nvd.nist.gov/vuln/detail/CVE-2026-54514
https://www.cve.org/CVERecord?id=CVE-2026-54514
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
MEDIUM |
2.18.4 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-54515
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa
https://github.com/FasterXML/jackson-databind/issues/5962
https://github.com/FasterXML/jackson-databind/issues/5964
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
https://nvd.nist.gov/vuln/detail/CVE-2026-54515
https://www.cve.org/CVERecord?id=CVE-2026-54515
|
| io.netty:netty-codec |
CVE-2026-42583 |
HIGH |
4.1.125.Final |
4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42583
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6
https://nvd.nist.gov/vuln/detail/CVE-2026-42583
https://www.cve.org/CVERecord?id=CVE-2026-42583
|
| io.netty:netty-codec-dns |
CVE-2026-42579 |
HIGH |
4.1.122.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/security/cve/CVE-2026-42579
https://bugzilla.redhat.com/show_bug.cgi?id=2477217
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm
https://nvd.nist.gov/vuln/detail/CVE-2026-42579
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42579.json
https://tools.ietf.org/html/rfc1035#section-2.3.4
https://tools.ietf.org/html/rfc1035#section-4.1.4
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42579
|
| io.netty:netty-codec-http |
CVE-2026-33870 |
HIGH |
4.1.125.Final |
4.1.132.Final, 4.2.10.Final |
https://access.redhat.com/errata/RHSA-2026:10175
https://access.redhat.com/errata/RHSA-2026:10184
https://access.redhat.com/errata/RHSA-2026:13571
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:17789
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:22619
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:7109
https://access.redhat.com/errata/RHSA-2026:7380
https://access.redhat.com/errata/RHSA-2026:8159
https://access.redhat.com/errata/RHSA-2026:8509
https://access.redhat.com/security/cve/CVE-2026-33870
https://bugzilla.redhat.com/show_bug.cgi?id=2452453
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8
https://nvd.nist.gov/vuln/detail/CVE-2026-33870
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json
https://w4ke.info/2025/06/18/funky-chunks.html
https://w4ke.info/2025/10/29/funky-chunks-2.html
https://www.cve.org/CVERecord?id=CVE-2026-33870
https://www.rfc-editor.org/rfc/rfc9110
|
| io.netty:netty-codec-http |
CVE-2026-42584 |
HIGH |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/security/cve/CVE-2026-42584
https://bugzilla.redhat.com/show_bug.cgi?id=2477224
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3
https://nvd.nist.gov/vuln/detail/CVE-2026-42584
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42584
|
| io.netty:netty-codec-http |
CVE-2026-42587 |
HIGH |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-42587
https://bugzilla.redhat.com/show_bug.cgi?id=2477220
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv
https://nvd.nist.gov/vuln/detail/CVE-2026-42587
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json
https://www.cve.org/CVERecord?id=CVE-2026-42587
|
| io.netty:netty-codec-http |
CVE-2025-67735 |
MEDIUM |
4.1.125.Final |
4.2.8.Final, 4.1.129.Final |
https://access.redhat.com/security/cve/CVE-2025-67735
https://github.com/netty/netty
https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94
https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4
https://nvd.nist.gov/vuln/detail/CVE-2025-67735
https://www.cve.org/CVERecord?id=CVE-2025-67735
|
| io.netty:netty-codec-http |
CVE-2026-41417 |
MEDIUM |
4.1.125.Final |
4.1.133.Final, 4.2.13.Final |
https://access.redhat.com/security/cve/CVE-2026-41417
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv
https://nvd.nist.gov/vuln/detail/CVE-2026-41417
https://www.cve.org/CVERecord?id=CVE-2026-41417
|
| io.netty:netty-codec-http |
CVE-2026-42580 |
MEDIUM |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42580
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723
https://nvd.nist.gov/vuln/detail/CVE-2026-42580
https://www.cve.org/CVERecord?id=CVE-2026-42580
|
| io.netty:netty-codec-http |
CVE-2026-42581 |
MEDIUM |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/security/cve/CVE-2026-42581
https://bugzilla.redhat.com/show_bug.cgi?id=2477232
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9
https://nvd.nist.gov/vuln/detail/CVE-2026-42581
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42581
|
| io.netty:netty-codec-http |
CVE-2026-42585 |
MEDIUM |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42585
https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv
https://nvd.nist.gov/vuln/detail/CVE-2026-42585
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42585
|
| io.netty:netty-codec-http |
CVE-2026-50020 |
MEDIUM |
4.1.125.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-50020
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c
https://nvd.nist.gov/vuln/detail/CVE-2026-50020
https://www.cve.org/CVERecord?id=CVE-2026-50020
|
| io.netty:netty-codec-http2 |
CVE-2026-33871 |
HIGH |
4.1.125.Final |
4.1.132.Final, 4.2.11.Final |
https://access.redhat.com/errata/RHSA-2026:10175
https://access.redhat.com/errata/RHSA-2026:10184
https://access.redhat.com/errata/RHSA-2026:13571
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:17789
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:22619
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:7109
https://access.redhat.com/errata/RHSA-2026:7380
https://access.redhat.com/errata/RHSA-2026:8159
https://access.redhat.com/errata/RHSA-2026:8509
https://access.redhat.com/security/cve/CVE-2026-33871
https://bugzilla.redhat.com/show_bug.cgi?id=2452456
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv
https://nvd.nist.gov/vuln/detail/CVE-2026-33871
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33871.json
https://www.cve.org/CVERecord?id=CVE-2026-33871
|
| io.netty:netty-codec-http2 |
CVE-2026-42587 |
HIGH |
4.1.125.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-42587
https://bugzilla.redhat.com/show_bug.cgi?id=2477220
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv
https://nvd.nist.gov/vuln/detail/CVE-2026-42587
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json
https://www.cve.org/CVERecord?id=CVE-2026-42587
|
| io.netty:netty-codec-http2 |
CVE-2026-47244 |
MEDIUM |
4.1.125.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-47244
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q
https://nvd.nist.gov/vuln/detail/CVE-2026-47244
https://www.cve.org/CVERecord?id=CVE-2026-47244
|
| io.netty:netty-codec-http2 |
CVE-2026-48043 |
MEDIUM |
4.1.125.Final |
4.1.135.Final, 4.2.15.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-48043
https://bugzilla.redhat.com/show_bug.cgi?id=2488442
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j
https://nvd.nist.gov/vuln/detail/CVE-2026-48043
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json
https://www.cve.org/CVERecord?id=CVE-2026-48043
|
| io.netty:netty-codec-http2 |
CVE-2026-50560 |
MEDIUM |
4.1.125.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-50560
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm
https://nvd.nist.gov/vuln/detail/CVE-2026-50560
https://www.cve.org/CVERecord?id=CVE-2026-50560
https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
|
| io.netty:netty-handler |
CVE-2026-44249 |
HIGH |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-44249
https://bugzilla.redhat.com/show_bug.cgi?id=2488081
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86
https://nvd.nist.gov/vuln/detail/CVE-2026-44249
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json
https://www.cve.org/CVERecord?id=CVE-2026-44249
|
| io.netty:netty-handler |
CVE-2026-45416 |
HIGH |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-45416
https://bugzilla.redhat.com/show_bug.cgi?id=2488391
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh
https://nvd.nist.gov/vuln/detail/CVE-2026-45416
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json
https://www.cve.org/CVERecord?id=CVE-2026-45416
|
| io.netty:netty-handler |
CVE-2026-50010 |
HIGH |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-50010
https://bugzilla.redhat.com/show_bug.cgi?id=2488429
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
https://nvd.nist.gov/vuln/detail/CVE-2026-50010
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json
https://www.cve.org/CVERecord?id=CVE-2026-50010
|
| io.netty:netty-handler-proxy |
CVE-2026-42578 |
LOW |
4.1.122.Final |
4.1.133.Final, 4.2.13.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/security/cve/CVE-2026-42578
https://bugzilla.redhat.com/show_bug.cgi?id=2477226
https://github.com/advisories/GHSA-84h7-rjj3-6jx4
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr
https://nvd.nist.gov/vuln/detail/CVE-2026-42578
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42578.json
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42578
|
| io.netty:netty-resolver-dns |
CVE-2026-45674 |
HIGH |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-45674
https://bugzilla.redhat.com/show_bug.cgi?id=2488400
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc
https://nvd.nist.gov/vuln/detail/CVE-2026-45674
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45674.json
https://www.cve.org/CVERecord?id=CVE-2026-45674
|
| io.netty:netty-resolver-dns |
CVE-2026-47691 |
HIGH |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/security/cve/CVE-2026-47691
https://bugzilla.redhat.com/show_bug.cgi?id=2488439
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85
https://nvd.nist.gov/vuln/detail/CVE-2026-47691
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47691.json
https://www.cve.org/CVERecord?id=CVE-2026-47691
|
| io.netty:netty-resolver-dns |
CVE-2026-45673 |
MEDIUM |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-45673
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78
https://nvd.nist.gov/vuln/detail/CVE-2026-45673
https://www.cve.org/CVERecord?id=CVE-2026-45673
|
| io.netty:netty-transport-native-epoll |
CVE-2026-45536 |
MEDIUM |
4.1.122.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-45536
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9
https://nvd.nist.gov/vuln/detail/CVE-2026-45536
https://www.cve.org/CVERecord?id=CVE-2026-45536
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41293 |
CRITICAL |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/13
https://access.redhat.com/security/cve/CVE-2026-41293
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/19f17a257797e8d139b33ff9c88d362a273be148
https://github.com/apache/tomcat/commit/1c70480466572c9192ed412ebefcd43fc63137fd
https://github.com/apache/tomcat/commit/2a2476460e823789f530a22207873ea8cd6eff3b
https://github.com/apache/tomcat/commit/3915fd27e6810b14ccd21e3d900bd8faef44d3df
https://github.com/apache/tomcat/commit/57c2b3bfd62792631e1df24cf4237b990a0b36fa
https://github.com/apache/tomcat/commit/c2925554c677da57390f940d856871e18daaacab
https://github.com/apache/tomcat/commit/cf9452443bcbf3b1a4b435ef7d624364f1b65ca3
https://github.com/apache/tomcat/commit/e5cef9618c3f4fd31bd6fb1e83f0f18022280dac
https://github.com/apache/tomcat/commit/f72a6174ab1f0f5a053435f80448b4f6837fe6d7
https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r
https://nvd.nist.gov/vuln/detail/CVE-2026-41293
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-41293
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43512 |
CRITICAL |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/8
https://access.redhat.com/security/cve/CVE-2026-43512
https://github.com/apache/tomcat/commit/3d4d3fae07a6cd9c2eb193c5491001740ec64448
https://github.com/apache/tomcat/commit/6565a6cb6499e56fe2f34457cec99f9d1c4f39e9
https://github.com/apache/tomcat/commit/a99c355e8199adbfd67c9a1fffbd85b810b196cd
https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73
https://nvd.nist.gov/vuln/detail/CVE-2026-43512
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://www.cve.org/CVERecord?id=CVE-2026-43512
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43515 |
CRITICAL |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/11
https://access.redhat.com/security/cve/CVE-2026-43515
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/276087d9c7abbcecc6c4fb4e4b08cf64780c6e36
https://github.com/apache/tomcat/commit/c621317382682206fb58ab92ebd3e1b6fdd10ce9
https://github.com/apache/tomcat/commit/db919ff9912b4d61d1b702a1342b8bde39270031
https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb
https://nvd.nist.gov/vuln/detail/CVE-2026-43515
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-43515
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-24734 |
HIGH |
11.0.12 |
11.0.18, 10.1.52, 9.0.115 |
https://access.redhat.com/errata/RHSA-2026:19054
https://access.redhat.com/errata/RHSA-2026:26323
https://access.redhat.com/errata/RHSA-2026:5611
https://access.redhat.com/errata/RHSA-2026:5612
https://access.redhat.com/errata/RHSA-2026:6569
https://access.redhat.com/errata/RHSA-2026:8334
https://access.redhat.com/security/cve/CVE-2026-24734
https://bugzilla.redhat.com/2440426
https://bugzilla.redhat.com/show_bug.cgi?id=2440426
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24734
https://errata.almalinux.org/9/ALSA-2026-26323.html
https://errata.rockylinux.org/RLSA-2026:26323
https://github.com/apache/tomcat
https://linux.oracle.com/cve/CVE-2026-24734.html
https://linux.oracle.com/errata/ELSA-2026-26323.html
https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml
https://nvd.nist.gov/vuln/detail/CVE-2026-24734
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24734.json
https://www.cve.org/CVERecord?id=CVE-2026-24734
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-24880 |
HIGH |
11.0.12 |
9.0.116, 10.1.52, 11.0.20 |
http://www.openwall.com/lists/oss-security/2026/04/09/20
https://access.redhat.com/security/cve/CVE-2026-24880
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a
https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb
https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5
https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c
https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522
https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552
https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn
https://nvd.nist.gov/vuln/detail/CVE-2026-24880
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116
https://www.cve.org/CVERecord?id=CVE-2026-24880
https://www.herodevs.com/vulnerability-directory/cve-2026-24880
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-34483 |
HIGH |
11.0.12 |
9.0.116, 10.1.54, 11.0.21 |
http://www.openwall.com/lists/oss-security/2026/04/09/26
https://access.redhat.com/security/cve/CVE-2026-34483
https://github.com/apache/tomcat
https://lists.apache.org/thread/j1w7304yonlr8vo1tkb5nfs7od1y228b
https://nvd.nist.gov/vuln/detail/CVE-2026-34483
https://www.cve.org/CVERecord?id=CVE-2026-34483
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41284 |
HIGH |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/12
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/17dacd9aa48628da2eba37a9ab743c0b6c71685c
https://github.com/apache/tomcat/commit/a96fffd18487a29c0a30d36f00cb2b2d91f6d42c
https://github.com/apache/tomcat/commit/b3d1c1c239142e806be0b7329d304b94a58913ed
https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc
https://nvd.nist.gov/vuln/detail/CVE-2026-41284
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-41284
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-42498 |
HIGH |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/14
https://access.redhat.com/security/cve/CVE-2026-42498
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/169d725788ea6aec217ecac70fe4161c837ba423
https://github.com/apache/tomcat/commit/6cbe274592ef2d11607b5b188e1df649de52f8d5
https://github.com/apache/tomcat/commit/b7b173694d588ddcfa432f079baf763cbbbaa5c4
https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb
https://nvd.nist.gov/vuln/detail/CVE-2026-42498
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-42498
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43513 |
HIGH |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/9
https://access.redhat.com/security/cve/CVE-2026-43513
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/4a90d3fa93988c447cd5bb7482f76ff70d7f15c2
https://github.com/apache/tomcat/commit/6dd75beb55bd42fc5f78e929596b25018cd17717
https://github.com/apache/tomcat/commit/83f3e51df7b87f5f6e626951c575ded1a512e8ef
https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp
https://nvd.nist.gov/vuln/detail/CVE-2026-43513
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://www.cve.org/CVERecord?id=CVE-2026-43513
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-66614 |
MEDIUM |
11.0.12 |
11.0.15, 10.1.50, 9.0.113 |
https://access.redhat.com/security/cve/CVE-2025-66614
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/152c14885d45f5e0a8b59bd9f93c289cfe20ce30
https://github.com/apache/tomcat/commit/258a591b61f8cf5c22109e21e5a2a38b63454fd2
https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4
https://github.com/apache/tomcat/commit/9276b5e783c8cd5b3fe2bb716306b65004bdd940
https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e
https://github.com/apache/tomcat/commit/a4aa74232e826028cd2f7ba0445caf8a8b52c509
https://lists.apache.org/thread/vw6lxtlh2qbqwpb61wd3sv1flm2nttw7
https://nvd.nist.gov/vuln/detail/CVE-2025-66614
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-66614
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-25854 |
MEDIUM |
11.0.12 |
9.0.116, 10.1.53, 11.0.20 |
http://www.openwall.com/lists/oss-security/2026/04/09/21
https://access.redhat.com/security/cve/CVE-2026-25854
https://github.com/apache/tomcat
https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0
https://nvd.nist.gov/vuln/detail/CVE-2026-25854
https://www.cve.org/CVERecord?id=CVE-2026-25854
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43514 |
LOW |
11.0.12 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/10
https://access.redhat.com/security/cve/CVE-2026-43514
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/933dcdbf2515972280002929e7e597dead2e9ffa
https://github.com/apache/tomcat/commit/a102a2a157868ca51d83eaf5a119ccd9976a113e
https://github.com/apache/tomcat/commit/d35d9d23263c8e4af561f615c960c91697ff200e
https://lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1m
https://nvd.nist.gov/vuln/detail/CVE-2026-43514
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2026-43514
|
| org.springframework.boot:spring-boot |
CVE-2026-40973 |
HIGH |
3.4.7 |
4.0.6, 3.5.14 |
https://access.redhat.com/security/cve/CVE-2026-40973
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2026-40973
https://spring.io/security/cve-2026-40973
https://www.cve.org/CVERecord?id=CVE-2026-40973
|
| org.springframework.security:spring-security-core |
CVE-2026-22751 |
MEDIUM |
6.4.10 |
6.5.10, 7.0.5 |
https://access.redhat.com/security/cve/CVE-2026-22751
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/commit/163772775036c4146815a5266874278c6f45f047
https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261
https://nvd.nist.gov/vuln/detail/CVE-2026-22751
https://spring.io/security/cve-2026-22751
https://www.cve.org/CVERecord?id=CVE-2026-22751
|
| org.springframework.security:spring-security-core |
CVE-2026-22746 |
LOW |
6.4.10 |
6.5.10, 7.0.5 |
https://access.redhat.com/security/cve/CVE-2026-22746
https://github.com/spring-projects/spring-security
https://nvd.nist.gov/vuln/detail/CVE-2026-22746
https://spring.io/security/cve-2026-22746
https://www.cve.org/CVERecord?id=CVE-2026-22746
|
| org.springframework:spring-webmvc |
CVE-2026-22737 |
MEDIUM |
6.2.11 |
7.0.6, 6.2.17 |
https://access.redhat.com/security/cve/CVE-2026-22737
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-22737
https://spring.io/security/cve-2026-22737
https://www.cve.org/CVERecord?id=CVE-2026-22737
|
| org.springframework:spring-webmvc |
CVE-2026-22745 |
MEDIUM |
6.2.11 |
7.0.7, 6.2.18 |
https://access.redhat.com/security/cve/CVE-2026-22745
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2026-22745
https://spring.io/security/cve-2026-22745
https://www.cve.org/CVERecord?id=CVE-2026-22745
|
| org.springframework:spring-webmvc |
CVE-2026-22735 |
LOW |
6.2.11 |
7.0.6, 6.2.17 |
https://access.redhat.com/security/cve/CVE-2026-22735
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-22735
https://spring.io/security/cve-2026-22735
https://www.cve.org/CVERecord?id=CVE-2026-22735
|
| org.springframework:spring-webmvc |
CVE-2026-22741 |
LOW |
6.2.11 |
7.0.7, 6.2.18 |
https://access.redhat.com/security/cve/CVE-2026-22741
https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2026-22741
https://spring.io/security/cve-2026-22741
https://www.cve.org/CVERecord?id=CVE-2026-22741
|
| No Misconfigurations found |
|---|