Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default

Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

Openjdk-orb: unauthed class loading via iiop in eap

Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

Undertow-core: oom via missing limits in chunked trailer in eap's undertow

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap

Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2