Red Hat Security AdvisoryRHSA-2026:3951
JBoss EAP XP 5.0 Update 4.0 release. See references for release notes.
Released 2026-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP XP 5.0 Update 4.0
Fixes 3 records
Priority HIGH 70
The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-01-15 · Partial fix · 4.5.24, 5.0.7 CWE-444
Priority MEDIUM 64
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00631 · Published 2025-09-03 · Partial fix · 4.2.5.Final, 4.1.125.Final CWE-409
Priority MEDIUM 43
yawkat LZ4 Java provides LZ4 compression for Java.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00649 · Published 2025-12-05 · Partial fix · 1.10.1 CWE-201
