Red Hat Security Advisory

RHSA-2021:2465

Red Hat build of Eclipse Vert.x 4.1.0 security update

Released 2021-07-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Vert.x 4.1.0

Fixes 2 records

TI-2021-10139 CVE-2021-29425 · GHSA-gwrp-pvrq-jmwv

Possible limited path traversal vulnerabily in Apache Commons IO

MEDIUM 48

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.10549 Published 2021-04-13 Partial fix · 2.7 CWE-20

TI-2021-04507 CVE-2021-21409 · GHSA-f256-j965-7f32

Possible request smuggling in HTTP/2 due missing validation of content-length

MEDIUM 40

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04935 Published 2021-03-30 Partial fix · 4.1.61.Final CWE-444