Most recent entries from all

CLEANSTART-2026-ST40024 — Security fix for CVE-2025-2240 applied in: incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0

2026-10-03T14:59:04.952301+00:00

Affected: CleanStart: incubator-kie-kogito-data-index-ephemeral, CleanStart: kogito-apps

CVE-2025-2240 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

EUVD-2026-352315

2026-10-03T14:59:04.952358+00:00

EUVD-2026-352315

fkie_cve-2025-2240

2026-10-03T14:59:04.952374+00:00

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service (DoS) issue.

GHSA-gfh6-3pqw-x2j4 — SmallRye Fault Tolerance out-of-memory (OOM) issue

2026-10-03T14:59:04.952397+00:00

Affected: Maven: io.smallrye:smallrye-fault-tolerance-core

RHSA-2025:3376 — Red Hat Security Advisory: Red Hat build of Quarkus 3.15.4 release and security update

2026-10-03T14:59:04.952419+00:00

smallrye-fault-tolerance: SmallRye Fault Tolerance

WID-SEC-W-2025-0693 — Red Hat build of Quarkus: Schwachstelle ermöglicht Denial of Service

2026-10-03T14:59:04.952445+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Red Hat build of Quarkus ausnutzen, um einen Denial of Service Angriff durchzuführen.