TI-2025-30956 CVE-2025-48734 · GHSA-wxr5-93ph-8wr9
Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
Priority HIGH 73
Improper Access Control vulnerability in Apache Commons.
RHSA-2025:3465
Red Hat JBoss Enterprise Application Platform 7.4.21 security update
Released 2025-04-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-netty-4.1.119-1.Final_redhat_00004.1.el7eap, eap7-netty-all-4.1.119-1.Final_redhat_00004.1.el7eap, eap7-netty-buffer-4.1.119-1.Final_redhat_00004.1.el7eap +29
- Red Hat JBoss EAP 7.4 for RHEL 8 eap7-netty-4.1.119-1.Final_redhat_00004.1.el8eap, eap7-netty-all-4.1.119-1.Final_redhat_00004.1.el8eap, eap7-netty-buffer-4.1.119-1.Final_redhat_00004.1.el8eap +30
- Red Hat JBoss EAP 7.4 for RHEL 9 eap7-netty-4.1.119-1.Final_redhat_00004.1.el9eap, eap7-netty-buffer-4.1.119-1.Final_redhat_00004.1.el9eap, eap7-netty-codec-4.1.119-1.Final_redhat_00004.1.el9eap +29
Fixes 7 records
TI-2025-18650 CVE-2025-24970 · GHSA-4g8c-wm8x-jfhw
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
TI-2025-18862 CVE-2025-25193 · GHSA-389x-839f-4rhx
Denial of Service attack on windows app using Netty
Priority MEDIUM 58
Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final.
TI-2024-31824 CVE-2024-47535 · GHSA-xq3w-v528-46rv
Denial of Service attack on windows app using Netty
Priority MEDIUM 58
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2024-34252 CVE-2024-51127 · GHSA-r7mv-mv7m-pjw3
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily…
Priority MEDIUM 48
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
TI-2025-33004 CVE-2025-52999 · GHSA-h46c-h94j-95f3
jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
Priority MEDIUM 45
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.
TI-2025-17142 CVE-2025-23367 · GHSA-qr6x-62gq-4ccp
Org.wildfly.core:wildfly-server: wildfly improper rbac permission
Priority LOW 30
A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider.