sz-lk-purchase-bff.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-10-12 18:47:11.814623373 +0000 UTC m=+3.501296889

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ch.qos.logback:logback-core	CVE-2026-10532	LOW	1.5.19	1.5.34	https://advisory.echohq.com/cve/CVE-2026-10532 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/releases/tag/v_1.5.34 https://logback.qos.ch/news.html#1.5.34 https://nvd.nist.gov/vuln/detail/CVE-2026-10532
ch.qos.logback:logback-core	CVE-2026-1225	LOW	1.5.19	1.5.25	https://access.redhat.com/security/cve/CVE-2026-1225 https://advisory.echohq.com/cve/CVE-2026-1225 https://github.com/advisories/GHSA-qqpg-mvqg-649v https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
ch.qos.logback:logback-core	CVE-2026-9828	LOW	1.5.19	1.5.33	https://advisory.echohq.com/cve/CVE-2026-9828 https://github.com/qos-ch/logback https://logback.qos.ch/news.html#1.5.33 https://nvd.nist.gov/vuln/detail/CVE-2026-9828
com.fasterxml.jackson.core:jackson-core	CVE-2026-68494	HIGH	2.18.4.1	2.18.8, 2.21.4	https://access.redhat.com/security/cve/CVE-2026-68494 https://advisory.echohq.com/cve/CVE-2026-68494 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641 https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8 https://github.com/FasterXML/jackson-core/pull/1611 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9 https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-68494 https://www.cve.org/CVERecord?id=CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-68494
com.fasterxml.jackson.core:jackson-core	CVE-2026-89407	HIGH	2.18.4.1	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-89407 https://advisory.echohq.com/cve/CVE-2026-89407 https://getsafety.com/vulnerabilities/SFTY-20260922-89449/CVE-2026-89407 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff https://github.com/FasterXML/jackson-core/issues/1649 https://github.com/FasterXML/jackson-core/pull/1650 https://github.com/FasterXML/jackson-core/pull/1701 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89 https://nvd.nist.gov/vuln/detail/CVE-2026-89407 https://www.cve.org/CVERecord?id=CVE-2026-89407
com.fasterxml.jackson.core:jackson-core	CVE-2026-89425	HIGH	2.18.4.1	2.21.7, 2.22.3, 2.18.11	https://access.redhat.com/security/cve/CVE-2026-89425 https://advisory.echohq.com/cve/CVE-2026-89425 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3 https://github.com/FasterXML/jackson-core/pull/1698 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf https://nvd.nist.gov/vuln/detail/CVE-2026-89425 https://www.cve.org/CVERecord?id=CVE-2026-89425
com.fasterxml.jackson.core:jackson-core	CVE-2026-18401	MEDIUM	2.18.4.1	2.21.1, 2.18.6	https://access.redhat.com/security/cve/CVE-2026-18401 https://advisory.echohq.com/cve/CVE-2026-18401 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf https://github.com/FasterXML/jackson-core/pull/1555 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-18401
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	HIGH	2.18.4	2.18.8, 3.1.4, 2.21.4	https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/security/cve/CVE-2026-54512 https://advisory.echohq.com/cve/CVE-2026-54512 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm https://linux.oracle.com/cve/CVE-2026-54512.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54512 https://www.cve.org/CVERecord?id=CVE-2026-54512
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	HIGH	2.18.4	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:43218 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/errata/RHSA-2026:44061 https://access.redhat.com/errata/RHSA-2026:44062 https://access.redhat.com/errata/RHSA-2026:44063 https://access.redhat.com/errata/RHSA-2026:44064 https://access.redhat.com/errata/RHSA-2026:44065 https://access.redhat.com/errata/RHSA-2026:44066 https://access.redhat.com/errata/RHSA-2026:44271 https://access.redhat.com/errata/RHSA-2026:48095 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50846 https://access.redhat.com/errata/RHSA-2026:50847 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:54622 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-54513 https://advisory.echohq.com/cve/CVE-2026-54513 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f https://linux.oracle.com/cve/CVE-2026-54513.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json https://www.cve.org/CVERecord?id=CVE-2026-54513
com.fasterxml.jackson.core:jackson-databind	CVE-2026-68497	HIGH	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/errata/RHSA-2026:77648 https://access.redhat.com/security/cve/CVE-2026-68497 https://advisory.echohq.com/cve/CVE-2026-68497 https://bugzilla.redhat.com/2531964 https://bugzilla.redhat.com/show_bug.cgi?id=2531964 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68497 https://errata.almalinux.org/10/ALSA-2026-77648.html https://errata.rockylinux.org/RLSA-2026:77648 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd https://github.com/FasterXML/jackson-databind/pull/6127 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7 https://linux.oracle.com/cve/CVE-2026-68497.html https://linux.oracle.com/errata/ELSA-2026-77648.html https://nvd.nist.gov/vuln/detail/CVE-2026-68497 https://www.cve.org/CVERecord?id=CVE-2026-68497
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.18.4	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.18.4	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	MEDIUM	2.18.4	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/security/cve/CVE-2026-54514 https://advisory.echohq.com/cve/CVE-2026-54514 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5 https://nvd.nist.gov/vuln/detail/CVE-2026-54514 https://www.cve.org/CVERecord?id=CVE-2026-54514
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	MEDIUM	2.18.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-54515 https://advisory.echohq.com/cve/CVE-2026-54515 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v https://nvd.nist.gov/vuln/detail/CVE-2026-54515 https://www.cve.org/CVERecord?id=CVE-2026-54515
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	MEDIUM	2.18.4	2.18.8, 2.21.4	https://access.redhat.com/security/cve/CVE-2026-59888 https://advisory.echohq.com/cve/CVE-2026-59888 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4 https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d https://github.com/FasterXML/jackson-databind/pull/5974 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5 https://nvd.nist.gov/vuln/detail/CVE-2026-59888 https://www.cve.org/CVERecord?id=CVE-2026-59888
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	MEDIUM	2.18.4	2.21.5, 2.18.9, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-59889 https://advisory.echohq.com/cve/CVE-2026-59889 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b https://github.com/FasterXML/jackson-databind/issues/6060 https://github.com/FasterXML/jackson-databind/pull/6056 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh https://nvd.nist.gov/vuln/detail/CVE-2026-59889 https://www.cve.org/CVERecord?id=CVE-2026-59889
com.fasterxml.jackson.core:jackson-databind	CVE-2026-77310	MEDIUM	2.18.4	2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-77310 https://advisory.echohq.com/cve/CVE-2026-77310 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd https://github.com/FasterXML/jackson-databind/pull/6058 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6 https://nvd.nist.gov/vuln/detail/CVE-2026-77310 https://www.cve.org/CVERecord?id=CVE-2026-77310
com.fasterxml.jackson.core:jackson-databind	CVE-2026-83557	MEDIUM	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-83557 https://advisory.echohq.com/cve/CVE-2026-83557 https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f https://github.com/FasterXML/jackson-databind/issues/6156 https://github.com/FasterXML/jackson-databind/pull/6155 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j https://nvd.nist.gov/vuln/detail/CVE-2026-83557 https://www.cve.org/CVERecord?id=CVE-2026-83557
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	MEDIUM	2.18.4	2.18.9, 2.21.5	https://advisory.echohq.com/cve/GHSA-mhm7-754m-9p8w https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/c628b357ed143d8492756d5c1458cfb9fbeb29ed https://github.com/FasterXML/jackson-databind/commit/dea7eb466e98cc226c4ac65587581fb49926820c https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-mhm7-754m-9p8w https://github.com/advisories/GHSA-mhm7-754m-9p8w
io.micrometer:micrometer-core	CVE-2026-40984	HIGH	1.14.8	1.16.6, 1.15.12	https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-40984 https://advisory.echohq.com/cve/CVE-2026-40984 https://bugzilla.redhat.com/show_bug.cgi?id=2486716 https://github.com/micrometer-metrics/micrometer https://github.com/micrometer-metrics/micrometer/commit/36da131525228188a36779a28471a76c79213dd4 https://nvd.nist.gov/vuln/detail/CVE-2026-40984 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40984.json https://spring.io/security/cve-2026-40984 https://www.cve.org/CVERecord?id=CVE-2026-40984
io.netty:netty-codec	CVE-2026-42583	HIGH	4.1.125.Final	4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42583 https://advisory.echohq.com/cve/CVE-2026-42583 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583 https://www.cve.org/CVERecord?id=CVE-2026-42583
io.netty:netty-codec	CVE-2026-59901	HIGH	4.1.125.Final	4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59901 https://advisory.echohq.com/cve/CVE-2026-59901 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4 https://nvd.nist.gov/vuln/detail/CVE-2026-59901 https://www.cve.org/CVERecord?id=CVE-2026-59901
io.netty:netty-codec-dns	CVE-2026-42579	HIGH	4.1.122.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/security/cve/CVE-2026-42579 https://advisory.echohq.com/cve/CVE-2026-42579 https://bugzilla.redhat.com/show_bug.cgi?id=2477217 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm https://nvd.nist.gov/vuln/detail/CVE-2026-42579 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42579.json https://tools.ietf.org/html/rfc1035#section-2.3.4 https://tools.ietf.org/html/rfc1035#section-4.1.4 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42579
io.netty:netty-codec-dns	CVE-2026-73508	MEDIUM	4.1.122.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-73508 https://advisory.echohq.com/cve/CVE-2026-73508 https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/pull/17063 https://github.com/netty/netty/pull/17065 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3 https://nvd.nist.gov/vuln/detail/CVE-2026-73508 https://www.cve.org/CVERecord?id=CVE-2026-73508
io.netty:netty-codec-http	CVE-2026-33870	HIGH	4.1.125.Final	4.1.132.Final, 4.2.10.Final	https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33870 https://advisory.echohq.com/cve/CVE-2026-33870 https://bugzilla.redhat.com/show_bug.cgi?id=2452453 https://github.com/advisories/GHSA-pwqr-wmgm-9rr8 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 https://nvd.nist.gov/vuln/detail/CVE-2026-33870 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json https://w4ke.info/2025/06/18/funky-chunks.html https://w4ke.info/2025/10/29/funky-chunks-2.html https://www.cve.org/CVERecord?id=CVE-2026-33870 https://www.rfc-editor.org/rfc/rfc9110
io.netty:netty-codec-http	CVE-2026-42584	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42584 https://advisory.echohq.com/cve/CVE-2026-42584 https://bugzilla.redhat.com/show_bug.cgi?id=2477224 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http	CVE-2026-42587	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http	CVE-2026-55831	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-55831 https://advisory.echohq.com/cve/CVE-2026-55831 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w https://nvd.nist.gov/vuln/detail/CVE-2026-55831 https://www.cve.org/CVERecord?id=CVE-2026-55831
io.netty:netty-codec-http	CVE-2026-55833	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-55833 https://advisory.echohq.com/cve/CVE-2026-55833 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c https://nvd.nist.gov/vuln/detail/CVE-2026-55833 https://www.cve.org/CVERecord?id=CVE-2026-55833
io.netty:netty-codec-http	CVE-2026-56745	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56745 https://advisory.echohq.com/cve/CVE-2026-56745 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq https://nvd.nist.gov/vuln/detail/CVE-2026-56745 https://www.cve.org/CVERecord?id=CVE-2026-56745
io.netty:netty-codec-http	CVE-2025-67735	MEDIUM	4.1.125.Final	4.2.8.Final, 4.1.129.Final	https://access.redhat.com/security/cve/CVE-2025-67735 https://advisory.echohq.com/cve/CVE-2025-67735 https://github.com/netty/netty https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94 https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4 https://nvd.nist.gov/vuln/detail/CVE-2025-67735 https://ubuntu.com/security/notices/USN-8654-1 https://www.cve.org/CVERecord?id=CVE-2025-67735
io.netty:netty-codec-http	CVE-2026-41417	MEDIUM	4.1.125.Final	4.1.133.Final, 4.2.13.Final	https://access.redhat.com/security/cve/CVE-2026-41417 https://advisory.echohq.com/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http	CVE-2026-42580	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42580 https://advisory.echohq.com/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http	CVE-2026-42581	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42581 https://advisory.echohq.com/cve/CVE-2026-42581 https://bugzilla.redhat.com/show_bug.cgi?id=2477232 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http	CVE-2026-42585	MEDIUM	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42585 https://advisory.echohq.com/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http	CVE-2026-50020	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50020 https://advisory.echohq.com/cve/CVE-2026-50020 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c https://nvd.nist.gov/vuln/detail/CVE-2026-50020 https://www.cve.org/CVERecord?id=CVE-2026-50020
io.netty:netty-codec-http	CVE-2026-56746	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56746 https://advisory.echohq.com/cve/CVE-2026-56746 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5 https://nvd.nist.gov/vuln/detail/CVE-2026-56746 https://www.cve.org/CVERecord?id=CVE-2026-56746
io.netty:netty-codec-http	CVE-2026-59898	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59898 https://advisory.echohq.com/cve/CVE-2026-59898 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg https://nvd.nist.gov/vuln/detail/CVE-2026-59898 https://www.cve.org/CVERecord?id=CVE-2026-59898
io.netty:netty-codec-http	CVE-2026-59899	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59899 https://advisory.echohq.com/cve/CVE-2026-59899 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww https://netty.io/news/2026/07/09/4-1-136-Final.html https://nvd.nist.gov/vuln/detail/CVE-2026-59899 https://www.cve.org/CVERecord?id=CVE-2026-59899
io.netty:netty-codec-http	CVE-2026-59903	MEDIUM	4.1.125.Final	4.2.17.Final, 4.1.137.Final	https://access.redhat.com/security/cve/CVE-2026-59903 https://advisory.echohq.com/cve/CVE-2026-59903 https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46 https://nvd.nist.gov/vuln/detail/CVE-2026-59903 https://www.cve.org/CVERecord?id=CVE-2026-59903
io.netty:netty-codec-http	CVE-2026-59921	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59921 https://advisory.echohq.com/cve/CVE-2026-59921 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g https://nvd.nist.gov/vuln/detail/CVE-2026-59921 https://www.cve.org/CVERecord?id=CVE-2026-59921
io.netty:netty-codec-http2	CVE-2026-33871	HIGH	4.1.125.Final	4.1.132.Final, 4.2.11.Final	https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33871 https://advisory.echohq.com/cve/CVE-2026-33871 https://bugzilla.redhat.com/show_bug.cgi?id=2452456 https://github.com/advisories/GHSA-w9fj-cfpg-grvv https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv https://nvd.nist.gov/vuln/detail/CVE-2026-33871 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33871.json https://www.cve.org/CVERecord?id=CVE-2026-33871
io.netty:netty-codec-http2	CVE-2026-42587	HIGH	4.1.125.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2	CVE-2026-56819	HIGH	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-56819 https://advisory.echohq.com/cve/CVE-2026-56819 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972 https://nvd.nist.gov/vuln/detail/CVE-2026-56819 https://www.cve.org/CVERecord?id=CVE-2026-56819
io.netty:netty-codec-http2	CVE-2026-47244	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-47244 https://advisory.echohq.com/cve/CVE-2026-47244 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244 https://www.cve.org/CVERecord?id=CVE-2026-47244
io.netty:netty-codec-http2	CVE-2026-48043	MEDIUM	4.1.125.Final	4.1.135.Final, 4.2.15.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-48043 https://advisory.echohq.com/cve/CVE-2026-48043 https://bugzilla.redhat.com/show_bug.cgi?id=2488442 https://github.com/netty/netty https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-codec-http2	CVE-2026-50560	MEDIUM	4.1.125.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50560 https://advisory.echohq.com/cve/CVE-2026-50560 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm https://nvd.nist.gov/vuln/detail/CVE-2026-50560 https://www.cve.org/CVERecord?id=CVE-2026-50560 https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
io.netty:netty-codec-http2	CVE-2026-59900	MEDIUM	4.1.125.Final	4.2.16.Final, 4.1.136.Final	https://access.redhat.com/security/cve/CVE-2026-59900 https://advisory.echohq.com/cve/CVE-2026-59900 https://github.com/advisories/GHSA-c69g-56f8-xwqj https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj https://nvd.nist.gov/vuln/detail/CVE-2026-59900 https://www.cve.org/CVERecord?id=CVE-2026-59900
io.netty:netty-handler	CVE-2026-75595	CRITICAL	4.1.122.Final	4.2.17.Final, 4.1.137.Final	https://access.redhat.com/security/cve/CVE-2026-75595 https://advisory.echohq.com/cve/CVE-2026-75595 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5 https://nvd.nist.gov/vuln/detail/CVE-2026-75595 https://www.cve.org/CVERecord?id=CVE-2026-75595
io.netty:netty-handler	CVE-2026-44249	HIGH	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-44249 https://advisory.echohq.com/cve/CVE-2026-44249 https://bugzilla.redhat.com/show_bug.cgi?id=2488081 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 https://nvd.nist.gov/vuln/detail/CVE-2026-44249 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json https://www.cve.org/CVERecord?id=CVE-2026-44249
io.netty:netty-handler	CVE-2026-45416	HIGH	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-45416 https://advisory.echohq.com/cve/CVE-2026-45416 https://bugzilla.redhat.com/show_bug.cgi?id=2488391 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh https://nvd.nist.gov/vuln/detail/CVE-2026-45416 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json https://www.cve.org/CVERecord?id=CVE-2026-45416
io.netty:netty-handler	CVE-2026-50010	HIGH	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-50010 https://advisory.echohq.com/cve/CVE-2026-50010 https://bugzilla.redhat.com/show_bug.cgi?id=2488429 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9 https://nvd.nist.gov/vuln/detail/CVE-2026-50010 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json https://www.cve.org/CVERecord?id=CVE-2026-50010
io.netty:netty-handler	CVE-2026-75596	MEDIUM	4.1.122.Final	4.2.17.Final, 4.1.137.Final	https://advisory.echohq.com/cve/CVE-2026-75596 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4 https://nvd.nist.gov/vuln/detail/CVE-2026-75596
io.netty:netty-handler-proxy	CVE-2026-42578	LOW	4.1.122.Final	4.1.133.Final, 4.2.13.Final	https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42578 https://advisory.echohq.com/cve/CVE-2026-42578 https://bugzilla.redhat.com/show_bug.cgi?id=2477226 https://github.com/advisories/GHSA-84h7-rjj3-6jx4 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr https://nvd.nist.gov/vuln/detail/CVE-2026-42578 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42578.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42578
io.netty:netty-resolver-dns	CVE-2026-45674	HIGH	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/security/cve/CVE-2026-45674 https://advisory.echohq.com/cve/CVE-2026-45674 https://bugzilla.redhat.com/show_bug.cgi?id=2488400 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc https://nvd.nist.gov/vuln/detail/CVE-2026-45674 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45674.json https://www.cve.org/CVERecord?id=CVE-2026-45674
io.netty:netty-resolver-dns	CVE-2026-47691	HIGH	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/security/cve/CVE-2026-47691 https://advisory.echohq.com/cve/CVE-2026-47691 https://bugzilla.redhat.com/show_bug.cgi?id=2488439 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85 https://nvd.nist.gov/vuln/detail/CVE-2026-47691 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47691.json https://ubuntu.com/security/notices/USN-8742-1 https://www.cve.org/CVERecord?id=CVE-2026-47691
io.netty:netty-resolver-dns	CVE-2026-45673	MEDIUM	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45673 https://advisory.echohq.com/cve/CVE-2026-45673 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78 https://nvd.nist.gov/vuln/detail/CVE-2026-45673 https://www.cve.org/CVERecord?id=CVE-2026-45673
io.netty:netty-transport-native-epoll	CVE-2026-45536	MEDIUM	4.1.122.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45536 https://advisory.echohq.com/cve/CVE-2026-45536 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9 https://nvd.nist.gov/vuln/detail/CVE-2026-45536 https://www.cve.org/CVERecord?id=CVE-2026-45536
org.apache.logging.log4j:log4j-api	CVE-2026-49844	MEDIUM	2.24.3	2.25.5, 2.26.1	https://access.redhat.com/security/cve/CVE-2026-49844 https://advisory.echohq.com/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
org.bouncycastle:bcprov-jdk18on	CVE-2025-14813	CRITICAL	1.78.1	1.80.2, 1.81.1, 1.84	https://access.redhat.com/errata/RHSA-2026:11720 https://access.redhat.com/errata/RHSA-2026:11721 https://access.redhat.com/errata/RHSA-2026:13631 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:21772 https://access.redhat.com/errata/RHSA-2026:24977 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:60239 https://access.redhat.com/errata/RHSA-2026:60246 https://access.redhat.com/errata/RHSA-2026:60247 https://access.redhat.com/errata/RHSA-2026:60248 https://access.redhat.com/errata/RHSA-2026:60249 https://access.redhat.com/errata/RHSA-2026:60250 https://access.redhat.com/errata/RHSA-2026:60251 https://access.redhat.com/errata/RHSA-2026:60252 https://access.redhat.com/errata/RHSA-2026:60254 https://access.redhat.com/errata/RHSA-2026:60256 https://access.redhat.com/errata/RHSA-2026:60259 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2025-14813 https://advisory.echohq.com/cve/CVE-2025-14813 https://bugzilla.redhat.com/show_bug.cgi?id=2458640 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3 https://github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871f https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813 https://nvd.nist.gov/vuln/detail/CVE-2025-14813 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.json https://www.cve.org/CVERecord?id=CVE-2025-14813
org.bouncycastle:bcprov-jdk18on	CVE-2026-8763	CRITICAL	1.78.1	1.85	https://access.redhat.com/security/cve/CVE-2026-8763 https://advisory.echohq.com/cve/CVE-2026-8763 https://github.com/advisories/GHSA-9pwp-9qqc-pr26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558 https://github.com/bcgit/bc-java/releases/tag/r1rv85v2 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763 https://github.com/bcgit/bc-java/wiki/CVE-2026-8763 https://nvd.nist.gov/vuln/detail/CVE-2026-8763 https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on	CVE-2026-13506	HIGH	1.78.1	1.85	https://access.redhat.com/security/cve/CVE-2026-13506 https://advisory.echohq.com/cve/CVE-2026-13506 https://github.com/advisories/GHSA-qp49-qgx5-5m26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 https://github.com/bcgit/bc-java/wiki/CVE-2026-13506 https://nvd.nist.gov/vuln/detail/CVE-2026-13506 https://www.cve.org/CVERecord?id=CVE-2026-13506
org.bouncycastle:bcprov-jdk18on	CVE-2026-0636	MEDIUM	1.78.1	1.84	https://access.redhat.com/errata/RHSA-2026:11720 https://access.redhat.com/errata/RHSA-2026:11721 https://access.redhat.com/errata/RHSA-2026:13631 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:21772 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:60239 https://access.redhat.com/errata/RHSA-2026:60246 https://access.redhat.com/errata/RHSA-2026:60247 https://access.redhat.com/errata/RHSA-2026:60248 https://access.redhat.com/errata/RHSA-2026:60249 https://access.redhat.com/errata/RHSA-2026:60250 https://access.redhat.com/errata/RHSA-2026:60251 https://access.redhat.com/errata/RHSA-2026:60252 https://access.redhat.com/errata/RHSA-2026:60254 https://access.redhat.com/errata/RHSA-2026:60256 https://access.redhat.com/errata/RHSA-2026:60259 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-0636 https://advisory.echohq.com/cve/CVE-2026-0636 https://bugzilla.redhat.com/show_bug.cgi?id=2458641 https://github.com/advisories/GHSA-c3fc-8qff-9hwx https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636 https://nvd.nist.gov/vuln/detail/CVE-2026-0636 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0636.json https://www.cve.org/CVERecord?id=CVE-2026-0636
org.springframework.boot:spring-boot	CVE-2026-40973	HIGH	3.4.7	4.0.6, 3.5.14	https://access.redhat.com/security/cve/CVE-2026-40973 https://advisory.echohq.com/cve/CVE-2026-40973 https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-40973 https://spring.io/security/cve-2026-40973 https://www.cve.org/CVERecord?id=CVE-2026-40973
org.springframework.boot:spring-boot-autoconfigure	CVE-2026-41001	MEDIUM	3.4.7	4.0.7, 3.5.15	https://access.redhat.com/security/cve/CVE-2026-41001 https://advisory.echohq.com/cve/CVE-2026-41001 https://github.com/advisories/GHSA-ggg2-9786-hwc8 https://github.com/spring-projects/spring-boot https://github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111 https://nvd.nist.gov/vuln/detail/CVE-2026-41001 https://spring.io/security/cve-2026-41001 https://www.cve.org/CVERecord?id=CVE-2026-41001
org.springframework.cloud:spring-cloud-gateway-server	CVE-2025-41253	HIGH	4.2.3	4.3.2, 4.2.6	https://github.com/spring-cloud/spring-cloud-gateway https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2025-41253 https://spring.io/security/cve/2025-41253 https://www.cve.org/CVERecord?id=CVE-2025-41253
org.springframework:spring-core	CVE-2026-41848	LOW	6.2.11	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
org.springframework:spring-expression	CVE-2026-41850	HIGH	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41850 https://advisory.echohq.com/cve/CVE-2026-41850 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41850 https://spring.io/security/cve-2026-41850 https://www.cve.org/CVERecord?id=CVE-2026-41850
org.springframework:spring-expression	CVE-2026-41851	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41851 https://advisory.echohq.com/cve/CVE-2026-41851 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41851 https://spring.io/security/cve-2026-41851 https://www.cve.org/CVERecord?id=CVE-2026-41851
org.springframework:spring-expression	CVE-2026-41852	LOW	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41852 https://advisory.echohq.com/cve/CVE-2026-41852 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41852 https://spring.io/security/cve-2026-41852 https://www.cve.org/CVERecord?id=CVE-2026-41852
org.springframework:spring-web	CVE-2026-41854	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41854 https://advisory.echohq.com/cve/CVE-2026-41854 https://github.com/advisories/GHSA-7m2p-62gw-p8qq https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-41854 https://spring.io/security/cve-2026-41854 https://www.cve.org/CVERecord?id=CVE-2026-41854
org.springframework:spring-webflux	CVE-2026-47890	CRITICAL	6.2.8	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47890 https://advisory.echohq.com/cve/CVE-2026-47890 https://github.com/advisories/GHSA-j9f9-w8pj-32f8 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-47890 https://spring.io/security/cve-2026-47890 https://www.cve.org/CVERecord?id=CVE-2026-47890
org.springframework:spring-webflux	CVE-2026-47892	CRITICAL	6.2.8	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47892 https://advisory.echohq.com/cve/CVE-2026-47892 https://getsafety.com/vulnerabilities/SFTY-20260827-26369/CVE-2026-47892 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-47892 https://spring.io/security/cve-2026-47892 https://www.cve.org/CVERecord?id=CVE-2026-47892
org.springframework:spring-webflux	CVE-2026-41842	HIGH	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41842 https://advisory.echohq.com/cve/CVE-2026-41842 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41842 https://spring.io/security/cve-2026-41842 https://www.cve.org/CVERecord?id=CVE-2026-41842
org.springframework:spring-webflux	CVE-2026-22737	MEDIUM	6.2.8	7.0.6, 6.2.17	https://access.redhat.com/security/cve/CVE-2026-22737 https://advisory.echohq.com/cve/CVE-2026-22737 https://github.com/advisories/GHSA-4773-3jfm-qmx3 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22737 https://spring.io/security/cve-2026-22737 https://www.cve.org/CVERecord?id=CVE-2026-22737
org.springframework:spring-webflux	CVE-2026-22740	MEDIUM	6.2.8	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22740 https://advisory.echohq.com/cve/CVE-2026-22740 https://github.com/advisories/GHSA-5843-p793-ghmm https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22740 https://spring.io/security/cve-2026-22740 https://www.cve.org/CVERecord?id=CVE-2026-22740
org.springframework:spring-webflux	CVE-2026-22745	MEDIUM	6.2.8	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22745 https://advisory.echohq.com/cve/CVE-2026-22745 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22745 https://spring.io/security/cve-2026-22745 https://www.cve.org/CVERecord?id=CVE-2026-22745
org.springframework:spring-webflux	CVE-2026-41839	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41839 https://advisory.echohq.com/cve/CVE-2026-41839 https://github.com/advisories/GHSA-4hfh-6x8g-gwpp https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/b8ddd2c690fe3f00bb5e3d9f913a37504aab49a0 https://github.com/spring-projects/spring-framework/commit/d72da90d3a562632e2b565113813f7b4a31f8717 https://github.com/spring-projects/spring-framework/issues/36742 https://github.com/spring-projects/spring-framework/issues/36743 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41839 https://spring.io/security/cve-2026-41839 https://www.cve.org/CVERecord?id=CVE-2026-41839
org.springframework:spring-webflux	CVE-2026-41840	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41840 https://advisory.echohq.com/cve/CVE-2026-41840 https://github.com/advisories/GHSA-83f7-v6px-pp3h https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41840 https://spring.io/security/cve-2026-41840 https://www.cve.org/CVERecord?id=CVE-2026-41840
org.springframework:spring-webflux	CVE-2026-41841	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41841 https://advisory.echohq.com/cve/CVE-2026-41841 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41841 https://spring.io/security/cve-2026-41841 https://www.cve.org/CVERecord?id=CVE-2026-41841
org.springframework:spring-webflux	CVE-2026-41843	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41843 https://advisory.echohq.com/cve/CVE-2026-41843 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41843 https://spring.io/security/cve-2026-41843 https://www.cve.org/CVERecord?id=CVE-2026-41843
org.springframework:spring-webflux	CVE-2026-41844	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41844 https://advisory.echohq.com/cve/CVE-2026-41844 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853 https://github.com/spring-projects/spring-framework/commit/7add5243b9db13a9f8e765c8ab8545c8e8fe606b https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41844 https://spring.io/security/cve-2026-41844 https://www.cve.org/CVERecord?id=CVE-2026-41844
org.springframework:spring-webflux	CVE-2026-41853	MEDIUM	6.2.8	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41853 https://advisory.echohq.com/cve/CVE-2026-41853 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41853 https://spring.io/security/cve-2026-41853 https://www.cve.org/CVERecord?id=CVE-2026-41853
org.springframework:spring-webflux	CVE-2026-22735	LOW	6.2.8	7.0.6, 6.2.17	https://access.redhat.com/security/cve/CVE-2026-22735 https://advisory.echohq.com/cve/CVE-2026-22735 https://github.com/advisories/GHSA-6hcq-hmm3-jj3c https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22735 https://spring.io/security/cve-2026-22735 https://www.cve.org/CVERecord?id=CVE-2026-22735
org.springframework:spring-webflux	CVE-2026-22741	LOW	6.2.8	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22741 https://advisory.echohq.com/cve/CVE-2026-22741 https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22741 https://spring.io/security/cve-2026-22741 https://www.cve.org/CVERecord?id=CVE-2026-22741
No Misconfigurations found