snappy-java's unchecked chunk length leads to DoS
snappy-java is a fast compressor/decompressor for Java.
Red Hat Integration Camel for Spring Boot 3.18.3.2 release and security update
Released 2023-09-13 · Red Hat rating Important · View on Red Hat →
snappy-java is a fast compressor/decompressor for Java.
In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass.
jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization…
Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability.