RHSA-2026:54435

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

js-yaml is a JavaScript YAML parser and dumper.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Quarkus is a Java framework for building cloud-native applications.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.

Next.js is a React framework for building full-stack web applications.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

Netty is an asynchronous, event-driven network application framework.

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Netty is an asynchronous, event-driven network application framework.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header…

Netty is a network application framework for development of protocol servers and clients.

Quarkus is a Java framework for building cloud-native applications.

Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w…

Next.js is a React framework for building full-stack web applications.

A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.

Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames…

Netty is an asynchronous, event-driven network application framework.

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches…

In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects.

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.

Netty is a network application framework for development of protocol servers and clients.

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-p…

Next.js is a React framework for building full-stack web applications.

Next.js is a React framework for building full-stack web applications.