RHSA-2026:54650 Red Hat Security Advisory: nghttp2 security update

Bulletin has no description...

RHSA-2026:54637 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54624 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54605 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54554 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54540 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54539 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54534 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54520 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54528 Red Hat Security Advisory: python-pillow security update

Bulletin has no description...

RHSA-2026:54518 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54487 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

RHSA-2026:54486 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

Denial Of Service

Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to specially crafted HTTP requests causing excessive memory allocation when Spring Data Web Support is enabled with a controller method using @ProjectedPayload...

Denial Of Service

Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to a StackOverflowException when parsing attacker-controlled Sort parameters, allowing an attacker to exhaust application resources...

Incorrect Authorization

org.springframework.graphql:spring-graphql is vulnerable to Improper Authorization. The vulnerability is due to incorrect resolution of security annotations on @Controller data fetcher methods within type hierarchies, which allows an attacker to bypass authorization checks when security annotatio...

ejpt-mission-framework-poc

eJPT Mission Framework An evidence-backed Markdown workflow f...

Insecure Trusted-Package Validation

Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...

Open Redirect

Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...

SpEL Injection

Spring Data KeyValue / Spring Data Redis is vulnerable to SpEL Injection. The vulnerability is due to unsanitized Sort input being evaluated by SpelPropertyComparator, allowing an attacker to inject and execute malicious SpEL expressions...