CVE-2026-11502

A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/ThirdLoginController.java of the component Third-Party Login. This manipulation of...

CVE-2024-4027 Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service DoS attack...

CVE-2025-13805 nutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserialization

A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing a...

EUVD-2000-1036

Malware in sbrugna...

io.quarkus.http:quarkus-http-servlet (3.0.5.final), io.quarkus.http:quarkus-http-websockets-jsr (3.0.5.final) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.5.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.5.final -...

io.quarkiverse.neo4j:quarkus-neo4j-integration-tests (1.0.3), io.quarkus.http:quarkus-http-servlet (4.1.5) +33 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.5)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkiverse.neo4j:quarkus-neo4j-integration-tests 1.0.3 -...

io.quarkus.http:quarkus-http-servlet (4.0.0.alpha2), io.quarkus.http:quarkus-http-websockets-jsr (4.0.0.alpha2) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.0.0.alpha2)

io.quarkus.http:quarkus-http-core MAVEN version 4.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 4.0.0.alpha2 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (>=0.26.0, <=1.2.1.final), io.quarkus.http:quarkus-http-servlet (3.0.0.beta1) +25 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.beta1)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin =0.26.0, =0.26.0, =0.26.0, =0.24.0,...

io.quarkus.http:quarkus-http-servlet (4.1.2), io.quarkus.http:quarkus-http-websocket-servlet (4.1.2) +27 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.2)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 4.1.2 - io.quarkus.http:quarkus-http-websocket-servlet...

io.quarkus.http:quarkus-http-servlet (4.1.6), io.quarkus.http:quarkus-http-websocket-servlet (4.1.6) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.6)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 4.1.6 - io.quarkus.http:quarkus-http-websocket-servlet...

io.quarkus.http:quarkus-http-servlet (3.0.0.alpha4), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.alpha4) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.alpha4)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.alpha4 -...

io.quarkus.http:quarkus-http-servlet (3.0.0.final), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.final) +28 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.final -...

com.github.shumonsharif:quarkus-cxf (1.0.0-alpha-01), com.github.shumonsharif:quarkus-cxf-deployment (1.0.0-alpha-01) +45 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.11.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - com.github.shumonsharif:quarkus-cxf 1.0.0-alpha-01 -...

io.automatiko.quarkus:automatiko-operator-deployment (0.15.0), io.automatiko.quarkus:automatiko-service-deployment (0.15.0) +39 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.1.8)

io.quarkus.http:quarkus-http-core MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.15.0 -...

io.quarkus.http:quarkus-http-servlet (3.0.0.alpha1), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.alpha1) +2 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.alpha1)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.alpha1 -...

io.quarkus.http:quarkus-http-servlet (3.0.0.alpha6), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.alpha6) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.alpha6)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.alpha6 -...

io.quarkus.http:quarkus-http-servlet (3.0.0.beta3), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.beta3) +32 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.beta3)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.beta3 -...

io.quarkus.http:quarkus-http-servlet (3.0.10.final), io.quarkus.http:quarkus-http-websockets-jsr (3.0.10.final) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.10.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.10.final -...

io.quarkus.http:quarkus-http-servlet (4.0.0.alpha3), io.quarkus.http:quarkus-http-websocket-servlet (4.0.0.alpha3) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (4.0.0.alpha3)

io.quarkus.http:quarkus-http-core MAVEN version 4.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 4.0.0.alpha3 -...

io.quarkus.http:quarkus-http-servlet (3.0.0.alpha2), io.quarkus.http:quarkus-http-websockets-jsr (3.0.0.alpha2) potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.0.alpha2)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - io.quarkus.http:quarkus-http-servlet 3.0.0.alpha2 -...