TI-2026-26232 CVE-2026-33871 · GHSA-w9fj-cfpg-grvv
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Priority MEDIUM 46
Netty is an asynchronous, event-driven network application framework.
RHSA-2026:19678
Red Hat JBoss Enterprise Application Platform 8.1.6 XP 6.0.4.GA security release
Released 2026-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.0.4.GA io.netty.netty-codec-http2-4.1.132.Final-redhat-00001.jar, org.apache.zookeeper.zookeeper-3.8.6.redhat-00001.jar
Fixes 3 records
TI-2026-19592 CVE-2026-24308 · GHSA-crhr-qqj8-rpxc
Apache ZooKeeper: Sensitive information disclosure in client configuration handling
Priority LOW 35
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile.
TI-2026-19568 CVE-2026-24281 · GHSA-7xrh-hqfc-g7qr
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
Priority LOW 34
Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with…