Red Hat Security AdvisoryRHSA-2026:69296
Red Hat Data Grid 8.6.3 security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixes 17 records
Priority HIGH 77
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00463 · Published 2026-08-04 · Partial fix · 2.18.8, 2.21.4 +1 CWE-770
Priority HIGH 74
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-07-21 · Fixed in 4.2.16.Final, 4.1.136.Final CWE-295
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-20 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00728 · Published 2026-07-17 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-400
Priority HIGH 69
zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00592 · Published 2026-08-24 · Partial fix · 8.3.0, 7.4.6 CWE-787
Priority MEDIUM 61
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.
CVSS 4.0MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00404 · Published 2026-07-14 · Partial fix · 3.4.6, 3.4.7 CWE-79
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority MEDIUM 44
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0046 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-835
Priority MEDIUM 43
Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509Tr…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00155 · Published 2026-08-22 · Partial fix · 4.2.16.Final, 4.1.137.Final CWE-297
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00694 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-611
Priority MEDIUM 40
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-08-13 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-772
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-20 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority LOW 37
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-770
Priority LOW 29
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00408 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-284
Priority LOW 26
Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00301 · Published 2026-08-21 · Partial fix CWE-74
THREATIST.IORead the docs