OmniFaces: Forged combined-resource IDs and related output/push boundaries

## 1. Forged combined-resource IDs `CombinedResourceInfo` accepts a path-derived ID without an authenticity check, infla

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

## Summary `http4s-blaze-server` aggregates the fragments of an incoming WebSocket message with no limit on total size

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)

### Summary blaze-server can merge HTTP/1.1 chunked-body trailer fields into `Request.headers`. Because trailer fields

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

### Summary Five independent HTTP/1.1 conformance laxities in blaze's hand-written Java parser (`http/src/main/java/or

历史摘要 · 未重新核验 · GitHub Advisory

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

### Summary When a SASL PLAIN bind supplies an authorization identity (authzid) that resolves to a **different** user, P

历史摘要 · 未重新核验 · GitHub Advisory

OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway

The DSMLv2 SOAP gateway (opendj-dsml-servlet) in OpenIdentityPlatform OpenDJ through 5.1.1 dereferences attacker-supplie

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

CVE-2026-62379

## Summary A pre-authentication remote code execution vulnerability affects OpenAM. The remote authentication endpoint (

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

CVE-2026-62280

### Description The OAuth2/OIDC consent page rendered for `display=wap` authorize requests reflected several request-der

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass

CVE-2026-62263

### Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter` meant t

历史摘要 · 未重新核验 · GitHub Advisory

c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets

CVE-2026-55223

### Impact The JDBC spec defines the interface `DataSource`, with a method called `getConnection()`, and `ConnectionPoo

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

CVE-2024-7708

### Impact The original report: > Server handling of 100-Continue requests can lead to memory leak that can be abused t

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: Path parameter traversal

CVE-2026-8384

### Description (as reported) #### Summary In Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonicalPath() may leave d

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: HTTP Authority/Host mismatch

CVE-2026-6790

#### Summary Jetty currently accepts HTTP/2 and HTTP/3 requests where the regular Host header and the pseudo-header :au

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

CVE-2026-10051

### Description > FINDING — MEDIUM (HTTP/1.1 keep-alive connections with trailers) > HttpConnection._trailers Cross-Req

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

CVE-2026-10050

### Summary The `DigestAuthentication.apply()` method in Jetty's HTTP client uses `getBytes(StandardCharsets.ISO_8859_1)

历史摘要 · 未重新核验 · GitHub Advisory

Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

CVE-2026-59921

# Security Vulnerability Report: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder ## 1. Vulnerabil

历史摘要 · 未重新核验 · GitHub Advisory

Netty: STOMP CONNECT Frame Header Injection in Netty

CVE-2026-59920

# Security Vulnerability Report: STOMP CONNECT Frame Header Injection in Netty ## 1. Vulnerability Summary | Field | V

历史摘要 · 未重新核验 · GitHub Advisory

Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

CVE-2026-59919

# Security Vulnerability Report: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address in Netty ## 1. Vulnerability Su

历史摘要 · 未重新核验 · GitHub Advisory

Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

CVE-2026-59901

The `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a m

历史摘要 · 未重新核验 · GitHub Advisory

Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass

CVE-2026-59900

Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails

历史摘要 · 未重新核验 · GitHub Advisory