Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	27 mars 2026
CVE-2026-28367	Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator	8.7 Élevée	27 mars 2026
CVE-2026-28369	Undertow: undertow: request smuggling via malformed http request headers	8.7 Élevée	27 mars 2026
CVE-2026-28368	Undertow: undertow: request smuggling via inconsistent header parsing	8.7 Élevée	27 mars 2026
CVE-2026-33701	OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java	9.3 Critique	27 mars 2026
CVE-2026-3121	A flaw was found in Keycloak	6.5 Moyenne	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-4874	A flaw was found in Keycloak	3.1 Faible	26 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-3260	A flaw was found in Undertow	5.9 Moyenne	24 mars 2026
CVE-2026-4628	A flaw was found in Keycloak	4.3 Moyenne	23 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-4366	A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP…	5.8 Moyenne	18 mars 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 Élevée	12 mars 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 Élevée	12 mars 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 Élevée	12 mars 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2026-3429	A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level…	4.2 Moyenne	11 mars 2026
CVE-2026-28292	`simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0…	9.8 Critique	10 mars 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 Élevée	7 mars 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Non notée	7 mars 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Non notée	7 mars 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 Élevée	6 mars 2026
CVE-2026-3009	A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an…	8.1 Élevée	5 mars 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 Élevée	5 mars 2026

Autres produits Red Hat