TI-2026-26231 CVE-2026-33870 · GHSA-pwqr-wmgm-9rr8
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
RHSA-2026:8509
Red Hat AMQ Broker 7.14.0 release and security update
Released 2026-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AMQ Broker 7.14.0
Fixes 6 records
TI-2026-26232 CVE-2026-33871 · GHSA-w9fj-cfpg-grvv
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Priority MEDIUM 46
Netty is an asynchronous, event-driven network application framework.
TI-2026-01291 CVE-2026-1605 · GHSA-xxh7-fcf3-rj7f
Uncontrolled resource consumption in Eclipse Jetty
Priority MEDIUM 40
In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compr…
TI-2026-19592 CVE-2026-24308 · GHSA-crhr-qqj8-rpxc
Apache ZooKeeper: Sensitive information disclosure in client configuration handling
Priority LOW 35
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile.
TI-2026-19568 CVE-2026-24281 · GHSA-7xrh-hqfc-g7qr
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
Priority LOW 34
Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with…
TI-2026-25151 CVE-2026-32642 · GHSA-f4gc-mwrg-q36r
Incorrect authorization in Apache Artemis
Priority LOW 12
Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that…