TI-2022-20222 CVE-2022-41881 · GHSA-fx2c-96vj-985v
Uncontrolled recursion in netty
Priority HIGH 72
Netty project is an event-driven asynchronous network application framework.
RHSA-2023:2706
Red Hat Single Sign-On 7.6.3 security update on RHEL 8
Released 2023-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.6 for RHEL 8 rh-sso7-keycloak-18.0.7-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-18.0.7-1.redhat_00001.1.el8sso
Fixes 7 records
TI-2022-18262 CVE-2022-38752 · GHSA-9w3m-gqgf-c4p9
DoS in SnakeYAML
Priority MEDIUM 62
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-04106 CVE-2022-4492 · GHSA-pfcc-3g6r-8rg8
Server-side request forgery in undertow
Priority MEDIUM 40
The undertow client is not checking the server identity presented by the server certificate in https connections.
TI-2021-00272 CVE-2021-0341 · GHSA-3cqm-mf7h-prrj
Improper certificate validation in Android
Priority LOW 35
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto.
TI-2022-20206 CVE-2022-41854 · GHSA-w37g-rhq8-7m4j
Stack Overflow in Snakeyaml
Priority LOW 32
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-22595 CVE-2022-45787 · GHSA-q84x-3476-8ff2
Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider
Priority LOW 25
Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users.
TI-2023-00456 CVE-2023-0482 · GHSA-2c6g-pfx3-w7h8
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider…
Priority LOW 24
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.