Red Hat Security AdvisoryRHSA-2024:4873
Apicurio Registry (container images) release and security update [ 2.6.1 GA ]
Released 2024-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Apicurio Registry 2.6.1 GA
Fixes 5 records
Priority HIGH 66
Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01226 · Published 2024-03-21 · Partial fix · 7.1.0, 6.1.2 +1 CWE-22
Priority HIGH 66
Jetty is a Java based web server and servlet engine.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01433 · Published 2024-02-26 · Partial fix · 9.4.54, 10.0.20 +2 CWE-400
Priority MEDIUM 62
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00871 · Published 2023-12-25 · Partial fix · 0.9.4 CWE-400
Priority LOW 31
A vulnerability was found in the quarkus-core component.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00309 · Published 2024-04-04 · Partial fix · 3.2.12.Final-redhat-00001, 3.8.4.redhat-00002 +8 CWE-526
Priority LOW 29
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00786 · Published 2024-03-25 · Partial fix · 4.19.0, 5.0.0-beta.3 +1 CWE-1286
THREATIST.IORead the docs