Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

Quarkus authorization bypass via semicolon path normalization inconsistency

simple-git has Command Execution via Option-Parsing Bypass

Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli

Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Micrometer HTTP server instrumentations DoS vulnerability

Netty: Resource exhaustion in MqttDecoder

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

GOSTCTR implementation unable to process more than 255 blocks correctly

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks

Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

Undertow: undertow madeyoureset http/2 ddos vulnerability

Undertow: improper state management in proxy protocol parsing causes information leakage

Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

Undertow: url-encoded request path information can be broken on ajp-listener

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

Undertow: cookie smuggling/spoofing

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos