Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-27446	Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis	9.3 Critical	Mar 4, 2026
CVE-2026-0871	A flaw was found in Keycloak	4.9 Medium	Feb 27, 2026
CVE-2026-27830	c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and…	8.9 High	Feb 26, 2026
CVE-2026-27727	mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI…	8.9 High	Feb 25, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026
CVE-2026-25747	Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component	Not rated	Feb 23, 2026
CVE-2026-2733	A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even…	3.8 Low	Feb 19, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 High	Jan 30, 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 High	Jan 28, 2026
CVE-2026-1190	A flaw was found in Keycloak's SAML brokering functionality	3.1 Low	Jan 26, 2026
CVE-2025-14969	A flaw was found in Hibernate Reactive	4.3 Medium	Jan 26, 2026
CVE-2026-0603	Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection	8.3 High	Jan 23, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-1035	A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class…	3.1 Low	Jan 21, 2026
CVE-2026-1180	A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using…	5.8 Medium	Jan 20, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-0976	A flaw was found in Keycloak	3.7 Low	Jan 15, 2026
CVE-2026-0532	External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker…	8.6 High	Jan 14, 2026
CVE-2025-68493	Missing XML Validation vulnerability in Apache Struts, Apache Struts	Not rated	Jan 11, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-70974	Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key…	10.0 Critical	Jan 9, 2026

Other Red Hat products