THREATIST.IORead the docs HawtIO 4.0.0 for Red Hat build of Apache Camel 4 Release and security update.
Released 2024-06-03 · Red Hat rating Important · View on Red Hat →
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authen…