TI-2026-33205 CVE-2026-45416 · GHSA-x4gw-5cx5-pgmh
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Priority MEDIUM 41
Netty is a network application framework for development of protocol servers and clients.
RHSA-2026:28573
Red Hat Offline Knowledge Portal security and content update
Released 2026-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Offline Knowledge Portal 1.2.13 registry.redhat.io/offline-knowledge-portal/rhokp-rhel9
Fixes 5 records
TI-2026-36836 CVE-2026-50010 · GHSA-c653-97m9-rcg9
Netty's wrapping plain trust manager silently disables hostname verification
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-32226 CVE-2026-44249 · GHSA-3qp7-7mw8-wx86
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-05076 CVE-2026-5795 · GHSA-r7p8-xq5m-436c
Improper authentication in Eclipse Jetty
Priority LOW 35
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.
TI-2026-33092 CVE-2026-45292 · GHSA-rcgg-9c38-7xpx
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
Priority LOW 26
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.