apache-activemq-artemis-compat

3 results · Clear filters · Feed

• High 7.7
  CVE-2025-5115

  MadeYouReset HTTP/2 vulnerability

  In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,…

  Eclipse Jetty Eclipse Jetty trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Aug 20, 2025
• High 8.8
  CVE-2025-48734 Public exploit

  Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

  Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this…

  Apache Software Foundation Apache Commons BeanUtils 2.x Apache Commons BeanUtils 1.x druid Debian Ubuntu Azure Linux Wolfi Maven
  May 28, 2025
• High 7.5
  CVE-2025-24970

  SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

  Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

  netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  Feb 10, 2025