Read the docs
Red Hat Security Advisory

RHSA-2024:7052

Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA)

Released 2024-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

Priority MEDIUM 42

An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a tok…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2024-07-19 Partial fix · 4.0.5, 3.6.4 +1 CWE-20
Priority MEDIUM 41

In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consump…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01197 Published 2024-07-19 Partial fix · 3.6.4, 4.0.5 CWE-401
Priority LOW 39

The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00975 Published 2024-09-06 Partial fix · 6.3.23 CWE-611
Priority LOW 37

In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0058 Published 2024-09-04 Partial fix · 4.5.10 CWE-770