TI-2026-37281 CVE-2026-50559 · GHSA-qcxp-gm7m-4j5v
Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
Priority HIGH 72
Quarkus is a Java framework for building cloud-native applications.
RHSA-2026:26586
Red Hat build of Apache Camel 4.18 for Quarkus 3.33 security update
Released 2026-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Build of Apache Camel 3.33.2.SP1 io.netty.netty-codec-haproxy-4.1.135.Final-redhat-00001.jar, io.netty.netty-codec-http2-4.1.135.Final-redhat-00001.jar, io.netty.netty-handler-4.1.135.Final-redhat-00001.jar +3
Fixes 11 records
TI-2026-35500 CVE-2026-48059 · GHSA-h2qv-fj59-j46j
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
TI-2026-35195 CVE-2026-47691 · GHSA-5pvg-856g-cp85
Netty has Insufficient Bailiwick Validation for NS Records
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
TI-2026-33416 CVE-2026-45674 · GHSA-676x-f7gg-47vc
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
TI-2026-33205 CVE-2026-45416 · GHSA-x4gw-5cx5-pgmh
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Priority MEDIUM 41
Netty is a network application framework for development of protocol servers and clients.
TI-2026-35485 CVE-2026-48043 · GHSA-c2gf-v879-257j
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
TI-2026-32768 CVE-2026-44893 · GHSA-cc37-9q2j-3hfv
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
TI-2026-36836 CVE-2026-50010 · GHSA-c653-97m9-rcg9
Netty's wrapping plain trust manager silently disables hostname verification
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-32226 CVE-2026-44249 · GHSA-3qp7-7mw8-wx86
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-31933 CVE-2026-43869 · GHSA-7pwc-h2j2-rjgj
Apache Thrift: TSSLTransportFactory.java hostname verification
Priority LOW 39
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.
TI-2026-31932 CVE-2026-43868 · GHSA-2f9f-gq7v-9h6m
Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
Priority LOW 31
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.