org.wildfly.core:wildfly-core-feature-pack-common (23.0.0.beta4), org.wildfly.core:wildfly-core-galleon-pack (23.0.0.beta4) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (23.0.0.beta4)

org.wildfly.core:wildfly-elytron-integration MAVEN version 23.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.0.beta4 -...

org.wildfly.core:wildfly-core-feature-pack-common (25.0.1.final), org.wildfly.core:wildfly-core-galleon-pack (25.0.1.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (25.0.1.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 25.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 25.0.1.final -...

org.wildfly.core:wildfly-core-feature-pack-common (21.1.0.final), org.wildfly.core:wildfly-core-galleon-pack (21.1.0.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (21.1.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 21.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 21.1.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta8), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta8) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (20.0.0.beta8)

org.wildfly.core:wildfly-elytron-integration MAVEN version 20.0.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta8 -...

org.wildfly.core:wildfly-core-feature-pack-common (22.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (22.0.0.beta3) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (22.0.0.beta3)

org.wildfly.core:wildfly-elytron-integration MAVEN version 22.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 22.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.beta6), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.beta6) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.beta6)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.beta6 -...

org.wildfly.core:wildfly-core-feature-pack-common (30.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (30.0.0.beta3) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (30.0.0.beta3)

org.wildfly.core:wildfly-elytron-integration MAVEN version 30.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 30.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (>=31.0.0.beta1, <=31.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (>=31.0.0.beta1, <=31.0.2.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=31.0.0.beta1, <=31.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.final Source cves: CVE-2025-23368 Source advisory: OSV:GHSA-QHP6-6P8P-2RQH...

org.wildfly.core:wildfly-core-feature-pack-common (21.0.0.beta2), org.wildfly.core:wildfly-core-galleon-pack (21.0.0.beta2) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (21.0.0.beta2)

org.wildfly.core:wildfly-elytron-integration MAVEN version 21.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 21.0.0.beta2 -...

org.wildfly.core:wildfly-core-feature-pack-common (22.0.1.final), org.wildfly.core:wildfly-core-galleon-pack (22.0.1.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (22.0.1.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 22.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 22.0.1.final -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (20.0.2.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (20.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 20.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.2.final -...

org.wildfly.core:wildfly-core-feature-pack-common (25.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (25.0.2.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (25.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 25.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 25.0.2.final -...

org.wildfly.core:wildfly-core-feature-pack-common (24.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (24.0.0.beta3) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (24.0.0.beta3)

org.wildfly.core:wildfly-elytron-integration MAVEN version 24.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 24.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.3.final), org.wildfly.core:wildfly-core-galleon-pack (23.0.3.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (23.0.3.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 23.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.3.final -...

org.wildfly.core:wildfly-core-feature-pack-common (25.0.0.beta5), org.wildfly.core:wildfly-core-galleon-pack (25.0.0.beta5) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (25.0.0.beta5)

org.wildfly.core:wildfly-elytron-integration MAVEN version 25.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 25.0.0.beta5 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.final), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (24.0.0.final), org.wildfly.core:wildfly-core-galleon-pack (24.0.0.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (24.0.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 24.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 24.0.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.1.final), org.wildfly.core:wildfly-core-galleon-pack (20.0.1.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (20.0.1.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 20.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.1.final -...

CVE-2026-1387: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to cause Denial of Service by uploading a malicious file and repeatedly querying it through GraphQl...

PT-2026-7516

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.7 through 18.7.3 GitLab CE/EE versions 18.8 through 18.8.3 Description An unauthenticated user could cause a denial of service through CPU exhaustion by submitting specially crafted markdown files. These files trigger...