Most recent entries from all

EUVD-2026-238636

fkie_cve-2022-31684

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.

GHSA-7w4x-4h67-pgmv — Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens

Affected: Maven: io.projectreactor.netty:reactor-netty-http

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may request log headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.

gsd-2022-31684

RHSA-2022:8902 — Red Hat Security Advisory: Red Hat Camel for Spring Boot 3.18.3 release and security update

sdk-server: Denial of Service reactor-netty-http: Log request headers in some cases of invalid HTTP requests apache-commons-text: variable interpolation RCE

WID-SEC-W-2023-0578 — IBM Security Guardium: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um Dateien zu manipulieren, beliebigen Programmcode auszuführen oder Informationen offenzulegen.