Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2026-3429	A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level…	4.2 Moyenne	11 mars 2026
CVE-2026-28292	`simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0…	9.8 Critique	10 mars 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 Élevée	7 mars 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Non notée	7 mars 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Non notée	7 mars 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 Élevée	6 mars 2026
CVE-2026-3009	A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an…	8.1 Élevée	5 mars 2026
CVE-2026-0871	A flaw was found in Keycloak	4.9 Moyenne	27 févr. 2026
CVE-2026-27830	c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and…	8.9 Élevée	26 févr. 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 Élevée	25 févr. 2026
CVE-2026-25747	Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component	Non notée	23 févr. 2026
CVE-2026-2733	A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even…	3.8 Faible	19 févr. 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 Élevée	30 janv. 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 Élevée	28 janv. 2026
CVE-2026-1190	A flaw was found in Keycloak's SAML brokering functionality	3.1 Faible	26 janv. 2026
CVE-2025-14969	A flaw was found in Hibernate Reactive	4.3 Moyenne	26 janv. 2026
CVE-2026-0603	Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection	8.3 Élevée	23 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2026-1035	A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class…	3.1 Faible	21 janv. 2026
CVE-2026-1180	A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using…	5.8 Moyenne	20 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026

Autres produits Red Hat