Java - Trivy Report - 2026-10-28 03:07:39.145882967 +0000 UTC m=+42.495855089

jar
Package Vulnerability ID Severity Installed Version Fixed Version Links
io.netty:netty-codec CVE-2026-42583 HIGH 4.1.79.Final 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42583 https://advisory.echohq.com/cve/CVE-2026-42583 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583 https://www.cve.org/CVERecord?id=CVE-2026-42583
io.netty:netty-codec CVE-2026-59901 HIGH 4.1.79.Final 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59901 https://advisory.echohq.com/cve/CVE-2026-59901 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4 https://nvd.nist.gov/vuln/detail/CVE-2026-59901 https://www.cve.org/CVERecord?id=CVE-2026-59901
io.netty:netty-codec CVE-2025-58057 MEDIUM 4.1.79.Final 4.1.125.Final https://access.redhat.com/security/cve/CVE-2025-58057 https://advisory.echohq.com/cve/CVE-2025-58057 https://github.com/netty/netty https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d%20%28netty-4.2.5.Final%29 https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj https://nvd.nist.gov/vuln/detail/CVE-2025-58057 https://ubuntu.com/security/notices/USN-7918-1 https://www.cve.org/CVERecord?id=CVE-2025-58057
io.netty:netty-codec-http CVE-2026-42584 HIGH 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42584 https://advisory.echohq.com/cve/CVE-2026-42584 https://bugzilla.redhat.com/show_bug.cgi?id=2477224 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http CVE-2026-42587 HIGH 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http CVE-2026-55831 HIGH 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-55831 https://advisory.echohq.com/cve/CVE-2026-55831 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w https://nvd.nist.gov/vuln/detail/CVE-2026-55831 https://www.cve.org/CVERecord?id=CVE-2026-55831
io.netty:netty-codec-http CVE-2026-55833 HIGH 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-55833 https://advisory.echohq.com/cve/CVE-2026-55833 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c https://nvd.nist.gov/vuln/detail/CVE-2026-55833 https://www.cve.org/CVERecord?id=CVE-2026-55833
io.netty:netty-codec-http CVE-2026-56745 HIGH 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56745 https://advisory.echohq.com/cve/CVE-2026-56745 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq https://nvd.nist.gov/vuln/detail/CVE-2026-56745 https://www.cve.org/CVERecord?id=CVE-2026-56745
io.netty:netty-codec-http CVE-2026-41417 MEDIUM 4.1.132.Final 4.1.133.Final, 4.2.13.Final https://access.redhat.com/security/cve/CVE-2026-41417 https://advisory.echohq.com/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http CVE-2026-42580 MEDIUM 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42580 https://advisory.echohq.com/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http CVE-2026-42581 MEDIUM 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42581 https://advisory.echohq.com/cve/CVE-2026-42581 https://bugzilla.redhat.com/show_bug.cgi?id=2477232 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http CVE-2026-42585 MEDIUM 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42585 https://advisory.echohq.com/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http CVE-2026-50020 MEDIUM 4.1.132.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-50020 https://advisory.echohq.com/cve/CVE-2026-50020 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c https://nvd.nist.gov/vuln/detail/CVE-2026-50020 https://www.cve.org/CVERecord?id=CVE-2026-50020
io.netty:netty-codec-http CVE-2026-56746 MEDIUM 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56746 https://advisory.echohq.com/cve/CVE-2026-56746 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5 https://nvd.nist.gov/vuln/detail/CVE-2026-56746 https://www.cve.org/CVERecord?id=CVE-2026-56746
io.netty:netty-codec-http CVE-2026-59898 MEDIUM 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59898 https://advisory.echohq.com/cve/CVE-2026-59898 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg https://nvd.nist.gov/vuln/detail/CVE-2026-59898 https://www.cve.org/CVERecord?id=CVE-2026-59898
io.netty:netty-codec-http CVE-2026-59899 MEDIUM 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59899 https://advisory.echohq.com/cve/CVE-2026-59899 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww https://netty.io/news/2026/07/09/4-1-136-Final.html https://nvd.nist.gov/vuln/detail/CVE-2026-59899 https://www.cve.org/CVERecord?id=CVE-2026-59899
io.netty:netty-codec-http CVE-2026-59903 MEDIUM 4.1.132.Final 4.2.17.Final, 4.1.137.Final https://access.redhat.com/security/cve/CVE-2026-59903 https://advisory.echohq.com/cve/CVE-2026-59903 https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46 https://nvd.nist.gov/vuln/detail/CVE-2026-59903 https://www.cve.org/CVERecord?id=CVE-2026-59903
io.netty:netty-codec-http CVE-2026-59921 MEDIUM 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59921 https://advisory.echohq.com/cve/CVE-2026-59921 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g https://nvd.nist.gov/vuln/detail/CVE-2026-59921 https://www.cve.org/CVERecord?id=CVE-2026-59921
io.netty:netty-codec-http2 CVE-2026-42587 HIGH 4.1.132.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2 CVE-2026-56819 HIGH 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56819 https://advisory.echohq.com/cve/CVE-2026-56819 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972 https://nvd.nist.gov/vuln/detail/CVE-2026-56819 https://www.cve.org/CVERecord?id=CVE-2026-56819
io.netty:netty-codec-http2 CVE-2026-47244 MEDIUM 4.1.132.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-47244 https://advisory.echohq.com/cve/CVE-2026-47244 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244 https://www.cve.org/CVERecord?id=CVE-2026-47244
io.netty:netty-codec-http2 CVE-2026-48043 MEDIUM 4.1.132.Final 4.1.135.Final, 4.2.15.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-48043 https://advisory.echohq.com/cve/CVE-2026-48043 https://bugzilla.redhat.com/show_bug.cgi?id=2488442 https://github.com/netty/netty https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-codec-http2 CVE-2026-50560 MEDIUM 4.1.132.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-50560 https://advisory.echohq.com/cve/CVE-2026-50560 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm https://nvd.nist.gov/vuln/detail/CVE-2026-50560 https://www.cve.org/CVERecord?id=CVE-2026-50560 https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
io.netty:netty-codec-http2 CVE-2026-59900 MEDIUM 4.1.132.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59900 https://advisory.echohq.com/cve/CVE-2026-59900 https://github.com/advisories/GHSA-c69g-56f8-xwqj https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj https://nvd.nist.gov/vuln/detail/CVE-2026-59900 https://www.cve.org/CVERecord?id=CVE-2026-59900
io.netty:netty-common CVE-2024-47535 MEDIUM 4.1.79.Final 4.1.115.Final https://access.redhat.com/security/cve/CVE-2024-47535 https://advisory.echohq.com/cve/CVE-2024-47535 https://github.com/advisories/GHSA-xq3w-v528-46rv https://github.com/netty/netty https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3 https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv https://nvd.nist.gov/vuln/detail/CVE-2024-47535 https://www.cve.org/CVERecord?id=CVE-2024-47535
io.netty:netty-common CVE-2025-25193 MEDIUM 4.1.79.Final 4.1.118.Final https://access.redhat.com/security/cve/CVE-2025-25193 https://advisory.echohq.com/cve/CVE-2025-25193 https://github.com/advisories/GHSA-389x-839f-4rhx https://github.com/netty/netty https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386 https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx https://nvd.nist.gov/vuln/detail/CVE-2025-25193 https://security.netapp.com/advisory/ntap-20250221-0006 https://security.netapp.com/advisory/ntap-20250221-0006/ https://www.cve.org/CVERecord?id=CVE-2025-25193
io.netty:netty-handler CVE-2026-75595 CRITICAL 4.1.79.Final 4.2.17.Final, 4.1.137.Final https://access.redhat.com/security/cve/CVE-2026-75595 https://advisory.echohq.com/cve/CVE-2026-75595 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5 https://nvd.nist.gov/vuln/detail/CVE-2026-75595 https://www.cve.org/CVERecord?id=CVE-2026-75595
io.netty:netty-handler CVE-2026-44249 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-44249 https://advisory.echohq.com/cve/CVE-2026-44249 https://bugzilla.redhat.com/show_bug.cgi?id=2488081 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 https://nvd.nist.gov/vuln/detail/CVE-2026-44249 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json https://www.cve.org/CVERecord?id=CVE-2026-44249
io.netty:netty-handler CVE-2026-45416 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-45416 https://advisory.echohq.com/cve/CVE-2026-45416 https://bugzilla.redhat.com/show_bug.cgi?id=2488391 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh https://nvd.nist.gov/vuln/detail/CVE-2026-45416 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json https://www.cve.org/CVERecord?id=CVE-2026-45416
io.netty:netty-handler CVE-2026-50010 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-50010 https://advisory.echohq.com/cve/CVE-2026-50010 https://bugzilla.redhat.com/show_bug.cgi?id=2488429 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9 https://nvd.nist.gov/vuln/detail/CVE-2026-50010 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json https://www.cve.org/CVERecord?id=CVE-2026-50010
io.netty:netty-handler CVE-2023-34462 MEDIUM 4.1.79.Final 4.1.94.Final https://access.redhat.com/security/cve/CVE-2023-34462 https://advisory.echohq.com/cve/CVE-2023-34462 https://github.com/advisories/GHSA-6mjq-h674-j845 https://github.com/netty/netty https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32 https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845 https://nvd.nist.gov/vuln/detail/CVE-2023-34462 https://security.netapp.com/advisory/ntap-20230803-0001 https://security.netapp.com/advisory/ntap-20230803-0001/ https://security.netapp.com/advisory/ntap-20240621-0007 https://security.netapp.com/advisory/ntap-20240621-0007/ https://ubuntu.com/security/notices/USN-6994-1 https://www.cve.org/CVERecord?id=CVE-2023-34462 https://www.debian.org/security/2023/dsa-5558
io.netty:netty-handler CVE-2026-75596 MEDIUM 4.1.79.Final 4.2.17.Final, 4.1.137.Final https://advisory.echohq.com/cve/CVE-2026-75596 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4 https://nvd.nist.gov/vuln/detail/CVE-2026-75596
net.minidev:json-smart CVE-2024-57699 HIGH 2.5.0 2.5.2 https://access.redhat.com/security/cve/CVE-2024-57699 https://advisory.echohq.com/cve/CVE-2024-57699 https://github.com/TurtleLiu/Vul_PoC/tree/main/CVE-2024-57699 https://github.com/advisories/GHSA-pq2g-wx69-c263 https://github.com/netplex/json-smart-v2 https://github.com/netplex/json-smart-v2/issues/232 https://github.com/netplex/json-smart-v2/issues/233 https://github.com/netplex/json-smart-v2/issues/236 https://github.com/netplex/json-smart-v2/releases/tag/2.5.2 https://nvd.nist.gov/vuln/detail/CVE-2024-57699 https://nvd.nist.gov/vuln/detail/cve-2023-1370 https://www.cve.org/CVERecord?id=CVE-2024-57699
net.sf.jasperreports:jasperreports CVE-2025-10492 HIGH 6.21.5 7.0.4 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports CVE-2026-6009 HIGH 6.21.5 7.0.7 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.apache.logging.log4j:log4j-api CVE-2026-49844 MEDIUM 2.25.4 2.25.5, 2.26.1 https://access.redhat.com/security/cve/CVE-2026-49844 https://advisory.echohq.com/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
org.bouncycastle:bcprov-jdk15on CVE-2023-33201 MEDIUM 1.70 https://access.redhat.com/security/cve/CVE-2023-33201 https://bouncycastle.org https://bouncycastle.org/releasenotes.html#r1rv74 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java https://github.com/bcgit/bc-java/wiki/CVE-2023-33201 https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-33201 https://security.netapp.com/advisory/ntap-20230824-0008 https://security.netapp.com/advisory/ntap-20230824-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.cve.org/CVERecord?id=CVE-2023-33201
org.bouncycastle:bcprov-jdk15on CVE-2024-29857 MEDIUM 1.70 1.78 https://access.redhat.com/security/cve/CVE-2024-29857 https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857 https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281 https://github.com/bcgit/bc-java/issues/1635 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857 https://nvd.nist.gov/vuln/detail/CVE-2024-29857 https://security.netapp.com/advisory/ntap-20241206-0008 https://security.netapp.com/advisory/ntap-20241206-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-29857
org.bouncycastle:bcprov-jdk15on CVE-2024-30171 MEDIUM 1.70 1.78 https://access.redhat.com/security/cve/CVE-2024-30171 https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171 https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0 https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d https://github.com/bcgit/bc-java/issues/1528 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171 https://nvd.nist.gov/vuln/detail/CVE-2024-30171 https://people.redhat.com/~hkario/marvin/ https://security.netapp.com/advisory/ntap-20240614-0008 https://security.netapp.com/advisory/ntap-20240614-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-30171
org.bouncycastle:bcprov-jdk15on CVE-2024-34447 MEDIUM 1.70 1.78 http://security.netapp.com/advisory/ntap-20240614-0007 https://access.redhat.com/security/cve/CVE-2024-34447 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/issues/1656 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447 https://nvd.nist.gov/vuln/detail/CVE-2024-34447 https://security.netapp.com/advisory/ntap-20240614-0007/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-34447
org.eclipse.angus:smtp CVE-2025-7962 MEDIUM 2.0.3 2.0.4 http://www.openwall.com/lists/oss-security/2025/09/03/4 https://access.redhat.com/security/cve/CVE-2025-7962 https://advisory.echohq.com/cve/CVE-2025-7962 https://github.com/advisories/GHSA-9342-92gg-6v29 https://github.com/eclipse-ee4j/angus-mail https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44 https://github.com/jakartaee/mail-api/issues/765 https://github.com/jakartaee/mail-api/pull/760 https://gitlab.eclipse.org/security/cve-assignement/-/issues/67 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539 https://nvd.nist.gov/vuln/detail/CVE-2025-7962 https://www.cve.org/CVERecord?id=CVE-2025-7962
org.json:json CVE-2022-45688 HIGH 20140107 20230227 https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c https://github.com/dromara/hutool/issues/2748 https://github.com/dromara/hutool/releases/tag/5.8.25 https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102 https://github.com/stleary/JSON-java/issues/708 https://nvd.nist.gov/vuln/detail/CVE-2022-45688
org.json:json CVE-2023-5072 HIGH 20140107 20231013 http://www.openwall.com/lists/oss-security/2023/12/13/4 https://access.redhat.com/security/cve/CVE-2023-5072 https://advisory.echohq.com/cve/CVE-2023-5072 https://github.com/advisories/GHSA-4jq9-2xhw-jpx7 https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7 https://github.com/stleary/JSON-java https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb https://github.com/stleary/JSON-java/issues/758 https://github.com/stleary/JSON-java/issues/771 https://github.com/stleary/JSON-java/pull/759 https://nvd.nist.gov/vuln/detail/CVE-2023-5072 https://security.netapp.com/advisory/ntap-20240621-0007/ https://www.cve.org/CVERecord?id=CVE-2023-5072
org.keycloak:keycloak-core CVE-2023-6841 HIGH 21.1.2 24.0.0 https://access.redhat.com/security/cve/CVE-2023-6841 https://bugzilla.redhat.com/show_bug.cgi?id=2254714 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/32837 https://github.com/keycloak/keycloak/releases/tag/24.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-6841 https://www.cve.org/CVERecord?id=CVE-2023-6841
org.keycloak:keycloak-core CVE-2024-10039 HIGH 21.1.2 26.0.6 https://access.redhat.com/security/cve/CVE-2024-10039 https://advisory.echohq.com/cve/CVE-2024-10039 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/35217 https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3 https://nvd.nist.gov/vuln/detail/CVE-2024-10039 https://www.cve.org/CVERecord?id=CVE-2024-10039
org.keycloak:keycloak-core CVE-2023-0105 MEDIUM 21.1.2 22.0.1 https://access.redhat.com/security/cve/CVE-2023-0105 https://bugzilla.redhat.com/show_bug.cgi?id=2158910 https://github.com/advisories/GHSA-c7xw-p58w-h6fj https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/commit/87a50d3ba790b049e436c9925874f9b418af7988 https://github.com/keycloak/keycloak/security/advisories/GHSA-c7xw-p58w-h6fj https://nvd.nist.gov/vuln/detail/CVE-2023-0105 https://www.cve.org/CVERecord?id=CVE-2023-0105
org.keycloak:keycloak-core CVE-2023-6927 MEDIUM 21.1.2 23.0.4 https://access.redhat.com/errata/RHSA-2024:0094 https://access.redhat.com/errata/RHSA-2024:0095 https://access.redhat.com/errata/RHSA-2024:0096 https://access.redhat.com/errata/RHSA-2024:0097 https://access.redhat.com/errata/RHSA-2024:0098 https://access.redhat.com/errata/RHSA-2024:0100 https://access.redhat.com/errata/RHSA-2024:0101 https://access.redhat.com/errata/RHSA-2024:0798 https://access.redhat.com/errata/RHSA-2024:0799 https://access.redhat.com/errata/RHSA-2024:0800 https://access.redhat.com/errata/RHSA-2024:0801 https://access.redhat.com/errata/RHSA-2024:0804 https://access.redhat.com/security/cve/CVE-2023-6927 https://bugzilla.redhat.com/show_bug.cgi?id=2255027 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-9vm7-v8wj-3fqw https://nvd.nist.gov/vuln/detail/CVE-2023-6927 https://www.cve.org/CVERecord?id=CVE-2023-6927
org.keycloak:keycloak-core CVE-2024-7260 MEDIUM 21.1.2 24.0.7 https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7260 https://bugzilla.redhat.com/show_bug.cgi?id=2301875 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-7260 https://www.cve.org/CVERecord?id=CVE-2024-7260
org.keycloak:keycloak-core CVE-2024-7318 MEDIUM 21.1.2 24.0.7, 25.0.4 https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7318 https://bugzilla.redhat.com/show_bug.cgi?id=2301876 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-xmmm-jw76-q7vg https://nvd.nist.gov/vuln/detail/CVE-2024-7318 https://www.cve.org/CVERecord?id=CVE-2024-7318
org.keycloak:keycloak-core CVE-2024-4028 LOW 21.1.2 https://access.redhat.com/security/cve/CVE-2024-4028 https://advisory.echohq.com/cve/CVE-2024-4028 https://bugzilla.redhat.com/show_bug.cgi?id=2276418 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-4028 https://www.cve.org/CVERecord?id=CVE-2024-4028
org.omnifaces:omnifaces CVE-2026-102695 HIGH 2.7.1 1.14.3, 2.7.33, 3.14.23, 4.7.12, 5.4.2 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1 https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4 https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786 https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7 https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5 https://github.com/omnifaces/omnifaces/releases/tag/1.14.3 https://github.com/omnifaces/omnifaces/releases/tag/2.7.33 https://github.com/omnifaces/omnifaces/releases/tag/3.14.23 https://github.com/omnifaces/omnifaces/releases/tag/4.7.12 https://github.com/omnifaces/omnifaces/releases/tag/5.4.2 https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
org.omnifaces:omnifaces CVE-2026-41883 HIGH 2.7.1 1.14.2, 2.7.32, 3.14.16, 4.7.5, 5.2.3 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/security/advisories/GHSA-vp6r-9m58-5xv8 https://nvd.nist.gov/vuln/detail/CVE-2026-41883
org.primefaces:primefaces CVE-2020-10544 MEDIUM 7.0 8.0 https://github.com/primefaces/primefaces https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f https://github.com/primefaces/primefaces/issues/5642 https://nvd.nist.gov/vuln/detail/CVE-2020-10544
org.springframework:spring-context CVE-2024-38820 MEDIUM 6.0.0 6.1.14 https://advisory.echohq.com/cve/CVE-2024-38820 https://github.com/advisories/GHSA-4gc7-5j7h-4qph https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2 https://nvd.nist.gov/vuln/detail/CVE-2024-38820 https://security.netapp.com/advisory/ntap-20241129-0003 https://security.netapp.com/advisory/ntap-20241129-0003/ https://spring.io/security/cve-2024-38820
org.springframework:spring-context CVE-2025-22233 LOW 6.0.0 6.2.7, 6.1.20 https://advisory.echohq.com/cve/CVE-2025-22233 https://github.com/advisories/GHSA-4wp7-92pw-q264 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332 https://github.com/spring-projects/spring-framework/issues/34801 https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2025-22233 https://spring.io/security/cve-2025-22233
org.springframework:spring-core CVE-2025-41249 HIGH 5.3.39 6.2.11 https://access.redhat.com/security/cve/CVE-2025-41249 https://advisory.echohq.com/cve/CVE-2025-41249 https://github.com/advisories/GHSA-jmp9-x22r-554x https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff https://github.com/spring-projects/spring-framework/issues/35342 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11 https://nvd.nist.gov/vuln/detail/CVE-2025-41249 https://spring.io/security/cve-2025-41249 https://www.cve.org/CVERecord?id=CVE-2025-41249
org.springframework:spring-core CVE-2026-41848 LOW 5.3.39 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
org.springframework:spring-expression CVE-2023-20863 HIGH 6.0.0 6.0.8, 5.3.27, 5.2.24.RELEASE https://access.redhat.com/security/cve/CVE-2023-20863 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15 https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f https://nvd.nist.gov/vuln/detail/CVE-2023-20863 https://security.netapp.com/advisory/ntap-20240524-0015 https://security.netapp.com/advisory/ntap-20240524-0015/ https://spring.io/security/cve-2023-20863 https://www.cve.org/CVERecord?id=CVE-2023-20863
org.springframework:spring-expression CVE-2023-20861 MEDIUM 6.0.0 6.0.7, 5.3.26, 5.2.23.RELEASE https://access.redhat.com/security/cve/CVE-2023-20861 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1 https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5 https://nvd.nist.gov/vuln/detail/CVE-2023-20861 https://security.netapp.com/advisory/ntap-20230420-0007 https://security.netapp.com/advisory/ntap-20230420-0007/ https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861 https://spring.io/security/cve-2023-20861 https://www.cve.org/CVERecord?id=CVE-2023-20861
No Misconfigurations found