Red Hat Security AdvisoryRHSA-2025:8761
HawtIO 4.2.0 for Red Hat build of Apache Camel 4 Release and security update.
Released 2025-06-10 · Red Hat rating Important · View on Red Hat →
Fixes 5 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority HIGH 72
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00582 · Published 2025-02-05 · Partial fix · 2.5.2 CWE-674
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00787 · Published 2024-12-05 · Partial fix · 0.1.12 CWE-1333
Priority LOW 36
A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00928 · Published 2024-12-12 · Partial fix · 5.3.4, 0.5.0-6 +3 CWE-444
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.0029 · Published 2025-02-06 · Partial fix · 1.22.12, 1.23.6 +1