Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.4.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

Information Exposure

Overview org.eclipse.jetty:jetty-client is an is an asynchronous http client module fro jetty server. Affected versions of this package are vulnerable to Information Exposure in the HttpClient. An attacker can obtain proxy authentication credentials by crafting a server that responds with a 407...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +328 more potentially affected by CVE-2026-77711 via org.eclipse.jetty:jetty-client (>=10.0.0-alpha0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0-alpha0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +5578 more potentially affected by CVE-2026-77711 via org.eclipse.jetty:jetty-client (>=9.4.0.m0, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-client MAVEN version =9.4.0.m0, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =3.46.0.12 and more Source cves: CVE-2026-77711 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243499...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +328 more potentially affected by CVE-2026-76184 via org.eclipse.jetty:jetty-client (>=10.0.0-alpha0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0-alpha0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +5578 more potentially affected by CVE-2026-76184 via org.eclipse.jetty:jetty-client (>=9.4.0.m0, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-client MAVEN version =9.4.0.m0, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =3.46.0.12 and more Source cves: CVE-2026-76184 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243510...

Information Exposure

Overview org.eclipse.jetty:jetty-client is an is an asynchronous http client module fro jetty server. Affected versions of this package are vulnerable to Information Exposure in the HttpClient. An attacker can obtain authentication credentials intended for one path by controlling redirect respons...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +5578 more potentially affected by CVE-2026-19864 via org.eclipse.jetty:jetty-client (>=9.4.0.m0, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-client MAVEN version =9.4.0.m0, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =3.46.0.12 and more Source cves: CVE-2026-19864 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243528...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +328 more potentially affected by CVE-2026-19864 via org.eclipse.jetty:jetty-client (>=10.0.0-alpha0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0-alpha0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0...

Cleartext Storage of Sensitive Information

Overview org.eclipse.jetty:jetty-client is an is an asynchronous http client module fro jetty server. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via the SessionAuthentication process. An attacker can access plaintext passwords of authenticated...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +318 more potentially affected by CVE-2026-77711 via org.eclipse.jetty:jetty-client (>=10.0.0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =9...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +5576 more potentially affected by CVE-2026-77711 via org.eclipse.jetty:jetty-client (>=9.4.0.v20161208, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-client MAVEN version =9.4.0.v20161208, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =3.46.0.12 and more Source cves: CVE-2026-77711 Source advisory: MEND:CVE-2026-77711...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +318 more potentially affected by CVE-2026-76184 via org.eclipse.jetty:jetty-client (>=10.0.0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =9...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +5576 more potentially affected by CVE-2026-76184 via org.eclipse.jetty:jetty-client (>=9.4.0.v20161208, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-client MAVEN version =9.4.0.v20161208, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =3.46.0.12 and more Source cves: CVE-2026-76184 Source advisory: MEND:CVE-2026-76184...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +37 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +36 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +51 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...