Red Hat Security Advisory

RHSA-2021:0084

Red Hat build of Quarkus 1.7.6 release and security update

Released 2021-01-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat build of Quarkus 1.7.6

Fixes 1 record

TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj

Improper input validation in Apache HttpClient

MEDIUM 42

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09032 Published 2020-12-02 Partial fix · 4.5.13, 5.0.3 CWE-20