Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

Linux-pam: linux-pam directory traversal

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Keycloak: keycloak: denial of service via specially crafted saml input

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Undertow: undertow madeyoureset http/2 ddos vulnerability

Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

Keycloak: potential bypass of brute force protection

Keycloak: keycloak: denial of service due to excessive samlrequest decompression

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function