VulnSea

cryostat_4_on_rhel vulnerabilities

CVEs whose affected-version data names the cryostat_4_on_rhel package (go, maven, npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

20 CVEsRSS

CVE-2026-56854Medium· 6.8
3w ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions (CVE-2026-56854)

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the Se…

SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.33%via CSAF
CVE-2026-56819High· 7.5PoC
2mo ago

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompress…

MidnightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.44%via CSAF
CVE-2026-55851High· 7.5
2mo ago

io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851)

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a…

TwilightRed Hat · OpenShift ServerlessEPSS 0.61%via CSAF
CVE-2026-56745High· 7.5
2mo ago

netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory i…

TwilightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.61%via CSAF
CVE-2026-56746High· 7.5
2mo ago

io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access r…

TwilightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.38%via CSAF
CVE-2026-55831High· 7.5
2mo ago

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831)

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing…

TwilightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.44%via CSAF
CVE-2026-55833High· 7.5
2mo ago

netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833)

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to ex…

TwilightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.42%via CSAF
CVE-2026-59899High· 7.5
2mo ago

io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899)

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing t…

TwilightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.34%via CSAF
CVE-2026-55874High· 7.7
2mo ago

SeaweedFS: github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via S3 API gateway path traversal (CVE-2026-55874)

A flaw was found in SeaweedFS, a distributed storage system. The S3 API gateway in SeaweedFS does not properly validate `X-Amz-Copy-Source` headers, specifically failing to reject "dot-dot" path segments. This allows an authenticated user,…

TwilightRed Hat · Cryostat 4 on RHEL 9EPSS 0.61%via CSAF
CVE-2026-59877High· 7.5⚖ disputed
2mo ago

protobufjs: protobufjs: Denial of Service via crafted .proto schema (CVE-2026-59877)

A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an op…

TwilightRed Hat · Red Hat OpenShift Service Mesh 3.3EPSS 0.36%via CSAF
CVE-2026-13149High· 7.5
2mo ago

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time c…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.36%via CSAF
CVE-2026-54512High· 8.1PoC
3mo ago

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious ty…

MidnightRed Hat · Red Hat JBoss EAP 7.4 ELS for RHEL 8EPSS 0.87%via CSAF
CVE-2026-54513High· 8.1
3mo ago

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the syst…

TwilightRed Hat · Red Hat Enterprise Linux AppStream E4S (v.8.8)EPSS 0.89%via CSAF
CVE-2026-6734High· 7.5
3mo ago

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one dest…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.34%via CSAF
CVE-2026-12151High· 7.5
3mo ago

undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)

A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client …

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.79%via CSAF
CVE-2026-9697High· 7.4
3mo ago

undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)

A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.46%via CSAF
CVE-2026-46595High· 7.1⚖ disputed
4mo ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.50%via CSAF
CVE-2026-33813High· 7.5
5mo ago

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

TwilightRed Hat · Red Hat Enterprise Linux 8EPSS 0.34%via NVD
CVE-2026-33816High· 8.3
5mo ago

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)

A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.56%via CSAF
CVE-2026-33815High· 8.3
5mo ago

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)

A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.

TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.60%via CSAF
cryostat_4_on_rhel vulnerabilities (CVEs) · VulnSea