Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)

Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling

Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line

Keycloak: xss via assertion consumer service url in saml post-binding flow

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap

Undertow: learningpushhandler can lead to remote memory dos attacks

Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2