Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling

Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line

Jastow: jastow cross-site scripting attack due to unsanitized uri

LDAP Injection Vulnerability in LDAPStoreHelper.java

Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.

Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators

Wildfly-core: path traversal on wildfly domain controller

Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram