RHSA-2026:69459

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

Netty is an asynchronous, event-driven network application framework.

Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a specific path, already configured for a H…

Netty is a network application framework for development of protocol servers and clients.

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All.

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM).

Values produced by ${random.value} are not suitable for use as secrets.