TI-2026-26231 CVE-2026-33870 · GHSA-pwqr-wmgm-9rr8
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
RHSA-2026:14276
Red Hat AMQ Broker 7.12.7 release and security update
Released 2026-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AMQ Broker 7.12.7
Fixes 7 records
TI-2026-26232 CVE-2026-33871 · GHSA-w9fj-cfpg-grvv
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Priority MEDIUM 46
Netty is an asynchronous, event-driven network application framework.
TI-2025-13517 CVE-2025-14813 · GHSA-574f-3g2m-x479
GOSTCTR implementation unable to process more than 255 blocks correctly
Priority MEDIUM 42
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.
TI-2026-19592 CVE-2026-24308 · GHSA-crhr-qqj8-rpxc
Apache ZooKeeper: Sensitive information disclosure in client configuration handling
Priority LOW 35
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile.
TI-2026-04899 CVE-2026-5588 · GHSA-wg6q-6289-32hp
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
Priority LOW 35
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.
TI-2026-19568 CVE-2026-24281 · GHSA-7xrh-hqfc-g7qr
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
Priority LOW 34
Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with…
TI-2026-00434 CVE-2026-0636 · GHSA-c3fc-8qff-9hwx
LDAP Injection Vulnerability in LDAPStoreHelper.java
Priority LOW 31
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc.