pom.xml - Trivy Report - 2026-10-12 18:47:23.553670524 +0000 UTC m=+11.202061874

pom
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ch.qos.logback:logback-core	CVE-2026-10532	LOW	1.5.19	1.5.34	https://advisory.echohq.com/cve/CVE-2026-10532 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/releases/tag/v_1.5.34 https://logback.qos.ch/news.html#1.5.34 https://nvd.nist.gov/vuln/detail/CVE-2026-10532
ch.qos.logback:logback-core	CVE-2026-1225	LOW	1.5.19	1.5.25	https://access.redhat.com/security/cve/CVE-2026-1225 https://advisory.echohq.com/cve/CVE-2026-1225 https://github.com/advisories/GHSA-qqpg-mvqg-649v https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
ch.qos.logback:logback-core	CVE-2026-9828	LOW	1.5.19	1.5.33	https://advisory.echohq.com/cve/CVE-2026-9828 https://github.com/qos-ch/logback https://logback.qos.ch/news.html#1.5.33 https://nvd.nist.gov/vuln/detail/CVE-2026-9828
io.netty:netty-codec	CVE-2026-42583	HIGH	4.1.125.Final	4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42583 https://advisory.echohq.com/cve/CVE-2026-42583 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583 https://www.cve.org/CVERecord?id=CVE-2026-42583
io.netty:netty-codec	CVE-2026-59901	HIGH	4.1.125.Final	4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59901 https://advisory.echohq.com/cve/CVE-2026-59901 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4 https://nvd.nist.gov/vuln/detail/CVE-2026-59901 https://www.cve.org/CVERecord?id=CVE-2026-59901
io.netty:netty-codec-http	CVE-2026-33870	HIGH	4.1.125.Final	4.1.132.Final, 4.2.10.Final	https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33870 https://advisory.echohq.com/cve/CVE-2026-33870 https://bugzilla.redhat.com/show_bug.cgi?id=2452453 https://github.com/advisories/GHSA-pwqr-wmgm-9rr8 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 https://nvd.nist.gov/vuln/detail/CVE-2026-33870 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json https://w4ke.info/2025/06/18/funky-chunks.html https://w4ke.info/2025/10/29/funky-chunks-2.html https://www.cve.org/CVERecord?id=CVE-2026-33870 https://www.rfc-editor.org/rfc/rfc9110
io.netty:netty-codec-http	CVE-2026-42584	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42584 https://advisory.echohq.com/cve/CVE-2026-42584 https://bugzilla.redhat.com/show_bug.cgi?id=2477224 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http	CVE-2026-42587	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http	CVE-2026-55831	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-55831 https://advisory.echohq.com/cve/CVE-2026-55831 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w https://nvd.nist.gov/vuln/detail/CVE-2026-55831 https://www.cve.org/CVERecord?id=CVE-2026-55831
io.netty:netty-codec-http	CVE-2026-55833	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-55833 https://advisory.echohq.com/cve/CVE-2026-55833 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c https://nvd.nist.gov/vuln/detail/CVE-2026-55833 https://www.cve.org/CVERecord?id=CVE-2026-55833
io.netty:netty-codec-http	CVE-2026-56745	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56745 https://advisory.echohq.com/cve/CVE-2026-56745 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq https://nvd.nist.gov/vuln/detail/CVE-2026-56745 https://www.cve.org/CVERecord?id=CVE-2026-56745
io.netty:netty-codec-http	CVE-2025-67735	MEDIUM	4.1.125.Final	4.2.8.Final, 4.1.129.Final	https://access.redhat.com/security/cve/CVE-2025-67735 https://advisory.echohq.com/cve/CVE-2025-67735 https://github.com/netty/netty https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94 https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4 https://nvd.nist.gov/vuln/detail/CVE-2025-67735 https://ubuntu.com/security/notices/USN-8654-1 https://www.cve.org/CVERecord?id=CVE-2025-67735
io.netty:netty-codec-http	CVE-2026-41417	MEDIUM	4.1.125.Final	4.1.133.Final, 4.2.13.Final	https://access.redhat.com/security/cve/CVE-2026-41417 https://advisory.echohq.com/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http	CVE-2026-42580	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42580 https://advisory.echohq.com/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http	CVE-2026-42581	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42581 https://advisory.echohq.com/cve/CVE-2026-42581 https://bugzilla.redhat.com/show_bug.cgi?id=2477232 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http	CVE-2026-42585	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42585 https://advisory.echohq.com/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http	CVE-2026-50020	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50020 https://advisory.echohq.com/cve/CVE-2026-50020 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c https://nvd.nist.gov/vuln/detail/CVE-2026-50020 https://www.cve.org/CVERecord?id=CVE-2026-50020
io.netty:netty-codec-http	CVE-2026-56746	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56746 https://advisory.echohq.com/cve/CVE-2026-56746 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5 https://nvd.nist.gov/vuln/detail/CVE-2026-56746 https://www.cve.org/CVERecord?id=CVE-2026-56746
io.netty:netty-codec-http	CVE-2026-59898	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59898 https://advisory.echohq.com/cve/CVE-2026-59898 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg https://nvd.nist.gov/vuln/detail/CVE-2026-59898 https://www.cve.org/CVERecord?id=CVE-2026-59898
io.netty:netty-codec-http	CVE-2026-59899	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59899 https://advisory.echohq.com/cve/CVE-2026-59899 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww https://netty.io/news/2026/07/09/4-1-136-Final.html https://nvd.nist.gov/vuln/detail/CVE-2026-59899 https://www.cve.org/CVERecord?id=CVE-2026-59899
io.netty:netty-codec-http	CVE-2026-59903	MEDIUM	4.1.125.Final	4.2.17.Final, 4.1.137.Final	https://access.redhat.com/security/cve/CVE-2026-59903 https://advisory.echohq.com/cve/CVE-2026-59903 https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46 https://nvd.nist.gov/vuln/detail/CVE-2026-59903 https://www.cve.org/CVERecord?id=CVE-2026-59903
io.netty:netty-codec-http	CVE-2026-59921	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59921 https://advisory.echohq.com/cve/CVE-2026-59921 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g https://nvd.nist.gov/vuln/detail/CVE-2026-59921 https://www.cve.org/CVERecord?id=CVE-2026-59921
io.netty:netty-codec-http2	CVE-2026-33871	HIGH	4.1.125.Final	4.1.132.Final, 4.2.11.Final	https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33871 https://advisory.echohq.com/cve/CVE-2026-33871 https://bugzilla.redhat.com/show_bug.cgi?id=2452456 https://github.com/advisories/GHSA-w9fj-cfpg-grvv https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv https://nvd.nist.gov/vuln/detail/CVE-2026-33871 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33871.json https://www.cve.org/CVERecord?id=CVE-2026-33871
io.netty:netty-codec-http2	CVE-2026-42587	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2	CVE-2026-56819	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56819 https://advisory.echohq.com/cve/CVE-2026-56819 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972 https://nvd.nist.gov/vuln/detail/CVE-2026-56819 https://www.cve.org/CVERecord?id=CVE-2026-56819
io.netty:netty-codec-http2	CVE-2026-47244	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-47244 https://advisory.echohq.com/cve/CVE-2026-47244 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244 https://www.cve.org/CVERecord?id=CVE-2026-47244
io.netty:netty-codec-http2	CVE-2026-48043	MEDIUM	4.1.125.Final	4.1.135.Final, 4.2.15.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-48043 https://advisory.echohq.com/cve/CVE-2026-48043 https://bugzilla.redhat.com/show_bug.cgi?id=2488442 https://github.com/netty/netty https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-codec-http2	CVE-2026-50560	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50560 https://advisory.echohq.com/cve/CVE-2026-50560 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm https://nvd.nist.gov/vuln/detail/CVE-2026-50560 https://www.cve.org/CVERecord?id=CVE-2026-50560 https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
io.netty:netty-codec-http2	CVE-2026-59900	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59900 https://advisory.echohq.com/cve/CVE-2026-59900 https://github.com/advisories/GHSA-c69g-56f8-xwqj https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj https://nvd.nist.gov/vuln/detail/CVE-2026-59900 https://www.cve.org/CVERecord?id=CVE-2026-59900
org.springframework.boot:spring-boot-starter-actuator	CVE-2026-22731	HIGH	3.4.7	3.5.12, 4.0.4	https://access.redhat.com/security/cve/CVE-2026-22731 https://advisory.echohq.com/cve/CVE-2026-22731 https://github.com/advisories/GHSA-8hfc-fq58-r658 https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-22731 https://spring.io/security/cve-2026-22731 https://www.cve.org/CVERecord?id=CVE-2026-22731
org.springframework.boot:spring-boot-starter-actuator	CVE-2026-22733	HIGH	3.4.7	4.0.4, 3.5.12	https://advisory.echohq.com/cve/CVE-2026-22733 https://github.com/advisories/GHSA-mgvc-8q2h-5pgc https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-22733 https://spring.io/security/cve-2026-22733
org.springframework.cloud:spring-cloud-gateway-server	CVE-2025-41253	HIGH	4.2.3	4.3.2, 4.2.6	https://github.com/spring-cloud/spring-cloud-gateway https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2025-41253 https://spring.io/security/cve/2025-41253 https://www.cve.org/CVERecord?id=CVE-2025-41253
org.springframework:spring-core	CVE-2026-41848	LOW	6.2.11	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type	Misconf ID	Check	Severity	Message
Dockerfile Security Check	DS026	No HEALTHCHECK defined	LOW	Add HEALTHCHECK instruction in your Dockerfile https://avd.aquasec.com/misconfig/ds026