TI-2022-08636 CVE-2022-24823 · GHSA-269q-hmxg-m83q
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Priority MEDIUM 58
Netty is an open-source, asynchronous event-driven network application framework.
RHSA-2022:6819
Red Hat AMQ Streams 2.2.0 release and security update
Released 2022-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AMQ Streams 2.2.0
Fixes 4 records
TI-2022-09231 CVE-2022-25647 · GHSA-4jrv-ppp4-jm57
Deserialization of untrusted data in com.google.code.gson:gson
Priority MEDIUM 50
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
TI-2020-18753 CVE-2020-36518 · GHSA-57j2-w4cx-62h2
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of…
Priority MEDIUM 47
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
TI-2022-15706 CVE-2022-34917 · GHSA-c9h3-c6qj-hh7q
Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
Priority MEDIUM 42
A security vulnerability has been identified in Apache Kafka.