Aller au contenu

Vulnérabilités de Red Hat streams for Apache Kafka 3

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-42581 Netty is an asynchronous, event-driven network application framework 5.8 Moyenne 13 mai 2026
CVE-2026-45109 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes 7.5 Élevée 13 mai 2026
CVE-2026-44579 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-44578 Next.js is a React framework for building full-stack web applications 8.6 Élevée 13 mai 2026
CVE-2026-44577 Next.js is a React framework for building full-stack web applications 5.9 Moyenne 13 mai 2026
CVE-2026-44574 Next.js is a React framework for building full-stack web applications 8.1 Élevée 13 mai 2026
CVE-2026-44575 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-44573 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39852 Quarkus is a Java framework for building cloud-native applications 8.8 Élevée 5 mai 2026
CVE-2026-6321 fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()… 7.5 Élevée 4 mai 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 24 avr. 2026
CVE-2026-42043 Axios is a promise based HTTP client for the browser and Node.js 7.2 Élevée 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2026-42033 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 24 avr. 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Non notée 22 avr. 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-33557 A possible security vulnerability has been identified in Apache Kafka Non notée 20 avr. 2026
CVE-2026-3505 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the… 8.7 Élevée 15 avr. 2026
CVE-2026-5588 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 6.3 Moyenne 15 avr. 2026
CVE-2026-5598 Covert timing channel vulnerability in Legion of the Bouncy Castle Inc 8.9 Élevée 15 avr. 2026
CVE-2026-0636 Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the… 5.5 Moyenne 15 avr. 2026
CVE-2025-14813 : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 9.3 Critique 15 avr. 2026
CVE-2026-2332 In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to… 7.4 Élevée 14 avr. 2026

Autres produits Red Hat