RHSA-2026:34608

Quarkus is a Java framework for building cloud-native applications.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

Axios is a promise based HTTP client for the browser and Node.js.

Netty is an asynchronous, event-driven network application framework.

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.

The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.

Next.js is a React framework for building full-stack web applications.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink.

Netty is an asynchronous, event-driven network application framework.

Netty is a network application framework for development of protocol servers and clients.

Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Quarkus is a Java framework for building cloud-native applications.

Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w…

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile.

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with…

Next.js is a React framework for building full-stack web applications.

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.