Skip to content
OpenAdvisories

Package · Wolfi

akhq

101 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1

    Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose h…

  • Critical 9.2

    Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

    Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.