Description
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1.7.GA | — | — |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 8 | eap8 +1 | 1-9.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-activemq-artemis +14 | 2.40.0-7.redhat_00015.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-aesh-extensions | 1.8.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-aesh-readline | 2.4.0-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-agroal +3 | 2.3.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-angus +1 | 2.0.5-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-angus-activation | 2.0.3-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-antlr4 +1 | 4.13.2-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-beanutils | 1.11.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-cli | 1.9.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-codec | 1.17.2-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-collections | 3.2.2-28.redhat_2.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-io | 2.16.1-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-commons-lang | 3.18.0-2.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-cxf +3 | 4.0.10-3.redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-apache-mime4j +2 | 0.8.12-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-apache-sshd | 2.14.0-4.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-artemis-native +2 | 1:2.0.0-2.redhat_00005.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-artemis-wildfly-integration | 2.0.4-1.Final_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-asyncutil | 0.1.0-2.redhat_00010.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-atinject | 2.0.1-5.redhat_00007.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-aws-java-sdk +27 | 2.30.32-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-azure-storage | 8.6.6-5.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-bouncycastle +5 | 1.84.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-byte-buddy | 1.14.18-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-caffeine | 3.1.8-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-commons-logging-jboss-logging | 1.0.0-2.Final_redhat_1.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-cryptacular | 1.2.5-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-cxf-xjc-dv +5 | 4.1.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-eap-product-conf-parent +1 | 801.7.0-1.GA_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-ecj | 1:3.33.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-eclipse-jgit | 6.10.1.202505221210-1.r_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-elasticsearch +2 | 8.15.4-4.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-elytron-web | 4.1.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-eventstream | 1.0.1-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-expressly | 5.0.0-6.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-fastinfoset +3 | 2.1.1-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-fge-btf | 1.2.0-4.redhat_00007.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-fge-msg-simple | 1.1.0-4.redhat_00007.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-gnu-getopt | 1.0.13-4.redhat_5.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-gson | 2.10.1-2.redhat_00005.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-guava +1 | 33.0.0-3.jre_redhat_00004.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-guava-failureaccess | 1.0.3-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-h2database | 2.2.224-4.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hal-console | 3.7.19-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hibernate +2 | 6.6.50-1.Final_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-hibernate-commons-annotations | 7.0.3-3.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hibernate-search +6 | 7.2.6-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hibernate-validator +1 | 8.0.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hornetq +3 | 2.4.11-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-hppc | 0.10.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-httpcomponents-asyncclient | 4.1.5-4.redhat_00006.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-httpcomponents-client | 4.5.14-5.redhat_00016.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-httpcomponents-core | 4.4.16-6.redhat_00011.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-infinispan +19 | 15.0.21-1.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-installation-manager-api | 1.1.1-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-ironjacamar +8 | 3.0.18-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jackson-core +1 | 2.18.4-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jackson-coreutils | 1.8.0-3.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jackson-jaxrs-base +10 | 2.18.4-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-activation | 2.1.4-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-annotation-api | 2.1.1-5.redhat_00005.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-authentication-api | 3.0.0-3.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-authorization-api | 2.1.0-3.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-batch-api | 2.1.1-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-ejb-api +2 | 4.0.1-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-enterprise-concurrent-api | 3.0.3-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-interceptor-api | 2.1.0-5.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-jms-api | 3.1.0-4.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-json | 1.1.6-5.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-json-api | 2.1.3-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-mail | 2.1.3-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-resource-api | 2.1.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-security +4 | 3.1.4-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-security-enterprise-api | 3.0.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-servlet-api | 6.0.0-6.redhat_00007.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-servlet-jsp-api | 3.1.1-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-servlet-jsp-jstl +2 | 3.0.2-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-transaction-api | 2.0.1-3.redhat_00004.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-validation-api | 3.0.2-3.redhat_00006.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-ws-rs-api | 3.1.0-5.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jakarta-xml-bind-api | 4.0.4-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jandex | 3.2.7-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jansi | 2.4.1-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jasypt | 1.9.3-4.redhat_00004.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-java-classmate | 1.6.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-javaee-jpa-spec | 3.1.0-4.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-javaee-security-soteria +1 | 3.0.3-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-javaewah | 1.2.3-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-javapackages-tools +1 | 6.0.0-8.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jaxb +10 | 4.0.6-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jaxbintros | 2.0.1-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jberet +1 | 3.1.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-aesh | 2.4.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-cert-helper +1 | 1.1.3-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-classfilewriter | 1.3.1-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-dmr | 1.7.0-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-ejb-client | 5.0.8-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-ejb3-ext-api | 2.4.0-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-el-api_5.0_spec | 4.0.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-genericjms | 3.0.0-3.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-iiop-client +1 | 2.0.1-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-invocation +1 | 2.0.1-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-logging | 3.6.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-logmanager | 2.1.19-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-marshalling +1 | 2.2.3-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-metadata +5 | 16.1.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-modules | 2.1.6-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-msc | 1.5.5-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-openjdk-orb | 10.1.1-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-remoting | 5.0.31-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-remoting-jmx | 3.1.0-3.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-saaj-api_3.0_spec +1 | 1.0.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-stdio | 1.1.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-threads | 2.5.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-transaction-spi | 8.0.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-vfs | 3.3.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-weld-api +2 | 5.0.0-4.SP3_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jboss-xnio-base | 3.8.16-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jbossws-api | 3.0.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jbossws-common | 5.1.0-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jbossws-cxf | 7.3.8-1.Final_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-jbossws-jaxws-undertow-httpspi | 2.0.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jbossws-spi | 5.0.0-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jcip-annotations | 1.0.0-3.redhat_00009.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jgroups | 1:5.3.23-1.Final_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-jgroups-aws | 3.0.1-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jgroups-azure | 2.0.2-1.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jgroups-kubernetes +1 | 2.0.2-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-joda-time | 2.12.7-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jose4j | 0.9.6-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jsf-impl | 4.0.11-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-json-patch | 1.9.0-3.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jsonb-spec | 3.0.1-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-jul-to-slf4j-stub | 1.0.1-1.Final_redhat_3.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-log4j | 2.23.1-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-lucene-core +6 | 9.11.1-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-mod_cluster +1 | 2.1.0-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-narayana +8 | 7.1.2-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-neethi | 3.2.1-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-netty +14 | 4.1.132-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-netty-xnio-transport | 0.1.10-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-nimbus-jose-jwt | 9.37.3-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-objectweb-asm +1 | 9.7.1-3.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-opensaml +13 | 4.3.2-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-parsson | 1.1.7-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-pem-keystore | 2.4.0-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-plexus-utils | 3.6.1-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-protoparser | 4.0.3-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-protostream | 5.0.14-2.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-reactive-streams | 1.0.4-4.redhat_00005.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-reactivex-rxjava | 3.1.12-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-reactivex-rxjava2 | 2.2.21-5.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-resilience4j +2 | 2.2.0-2.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-resteasy +15 | 6.2.15-1.Final_redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-resteasy-extensions +1 | 2.0.1-3.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-resteasy-spring | 3.2.0-3.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-saaj-impl | 3.0.4-2.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-shibboleth-java-support | 8.0.0-6.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-slf4j +1 | 2.0.17-1.redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-snakeyaml | 2.3.0-1.redhat_00002.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-stax-ex | 2.1.0-3.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-stax2-api | 4.2.2-2.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-staxmapper | 1.5.0-2.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-sun-istack-commons +2 | 4.1.2-2.redhat_00003.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-undertow | 2.3.24-4.SP3_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-undertow-jastow | 2.2.9-1.SP1_redhat_00001.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-vdx +2 | 1.1.6-3.redhat_1.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-velocity +1 | 2.3.0-7.redhat_00010.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-weld-ejb +6 | 5.1.6-1.Final_redhat_00001.1.el10eap | RHSA-2026:36344 |
| Red Hat JBoss EAP 8 | eap8-wildfly +3 | 8.1.7-4.GA_redhat_00003.1.el8eap | RHSA-2026:36344, RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-wildfly-elytron +1 | 2.6.9-1.Final_redhat_00001.1.el8eap | RHSA-2026:36343, RHSA-2026:36342 |
| Red Hat JBoss EAP 8 | eap8-wildfly-javadocs | 8.1.1-11.GA_redhat_00019.1.el8eap | RHSA-2026:36343, RHSA-2026:36342 |
Advisories 4
- RHSA-2026:36343 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update Red Hat Security Advisories (RHSA) · Sep 26, 2026
- RHSA-2026:36344 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update Red Hat Security Advisories (RHSA) · Sep 26, 2026
- RHSA-2026:36342 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update Red Hat Security Advisories (RHSA) · Sep 26, 2026
- WID-SEC-2026-2227 Red Hat JBoss Enterprise Application Platform (io.undertow.jastow): Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Jul 7, 2026
References
- RHSA-2026:36342 vendor-advisory
- RHSA-2026:36343 vendor-advisory
- RHSA-2026:36344 vendor-advisory
- RHSA-2026:36345 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-12799 vdb-entry
- RHBZ#2413071 issue-tracking