{"id":"CVE-2026-62243","aliases":["DEBIAN-CVE-2026-62243","EUVD-2026-64271","GHSA-c3j3-64rf-grvf","GHSA-p85m-gvr3-788c","RHSA-2026:70228","RHSA-2026:70229","RHSA-2026:70230","SUSE-SU-2026:4391-1","UBUNTU-CVE-2026-62243","openSUSE-SU-2026:11882-1"],"status":"published","title":"Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00155,"percentile":0.04667,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-297"],"published":"2026-08-22T12:26:43Z","modified":"2026-10-28T02:30:41Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16","1:4.1.48-7","1:4.1.48-7+deb12u1","1:4.1.48-7+deb12u2","1:4.1.48-8","1:4.1.48-9"]},{"source":"osv","ecosystem":"Debian:13","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-10+deb13u1","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16"]},{"source":"osv","ecosystem":"Debian:14","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-15","1:4.1.48-16"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.138-150200.4.56.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"netty-tcnative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.84-150200.3.51.1"}]}],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.2.6.Final-2","1:3.2.6.Final-2+deb8u2build0.14.04.1~esm1","1:3.2.6.Final-2+deb8u2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.2.6.Final-2","1:4.0.32-1","1:4.0.33-1","1:4.0.34-1","1:4.0.34-1ubuntu0.1~esm1","1:4.0.34-1ubuntu0.1~esm2","1:4.0.34-1ubuntu0.1~esm3","1:4.0.34-1ubuntu0.1~esm4","1:4.0.34-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.7-4","1:4.1.7-4ubuntu0.1~esm1","1:4.1.7-4ubuntu0.1","1:4.1.7-4ubuntu0.1+esm1","1:4.1.7-4ubuntu0.1+esm2","1:4.1.7-4ubuntu0.1+esm3","1:4.1.7-4ubuntu0.1+esm4","1:4.1.7-4ubuntu0.1+esm5","1:4.1.7-4ubuntu0.1+esm6","1:4.1.7-4ubuntu0.1+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.33-1","1:4.1.33-2","1:4.1.33-3","1:4.1.45-1","1:4.1.45-1ubuntu0.1~esm1","1:4.1.45-1ubuntu0.1~esm2","1:4.1.45-1ubuntu0.1~esm3","1:4.1.45-1ubuntu0.1~esm4","1:4.1.45-1ubuntu0.1~esm6","1:4.1.45-1ubuntu0.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-4","1:4.1.48-4+deb11u1build0.22.04.1","1:4.1.48-4+deb11u2build0.22.04.1","1:4.1.48-4+deb11u2ubuntu0.1~esm1","1:4.1.48-4+deb11u2ubuntu0.1~esm2","1:4.1.48-4+deb11u2ubuntu0.1","1:4.1.48-4+deb11u2ubuntu0.1+esm1","1:4.1.48-4+deb11u2ubuntu0.1+esm3","1:4.1.48-4+deb11u2ubuntu0.2","1:4.1.48-4+deb11u2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-7","1:4.1.48-8","1:4.1.48-9","1:4.1.48-9ubuntu0.1~esm1","1:4.1.48-9ubuntu0.1~esm2","1:4.1.48-9ubuntu0.1","1:4.1.48-9ubuntu0.1+esm1","1:4.1.48-9ubuntu0.1+esm3","1:4.1.48-9ubuntu0.2","1:4.1.48-9ubuntu0.2+esm1","1:4.1.48-9ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-16","1:4.1.48-16ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.1.48-10","1:4.1.48-11","1:4.1.48-12","1:4.1.48-13","1:4.1.48-14","1:4.1.48-16","1:4.1.48-16ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.138-1.1"}]}],"bundled":30}],"products":[{"vendor":"netty","product":"netty"}],"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c","tags":["vendor-advisory","advisory","article","report"]},{"url":"https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass","tags":["third-party-advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62243","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c3j3-64rf-grvf"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62243.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-62243","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70228","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index","tags":["article"]},{"url":"https://access.redhat.com/articles/7137769","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521309","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-32314","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-32869","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33162","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33185","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33236","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33237","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33288","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33363","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33405","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33409","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33413","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33449","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33459","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33501","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33579","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33616","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33640","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33683","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33848","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33871","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33904","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33925","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33967","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33968","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33973","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34018","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34095","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34096","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34111","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34161","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34222","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34521","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70228.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3505","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5680","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10832","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10832","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15560","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15562","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15565","tags":["advisory"]},{"url":"https://cwe.mitre.org/data/definitions/120.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15567","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44417","tags":["advisory"]},{"url":"https://lists.apache.org/thread/bqg6gjy2cx7rfyqjxcpv3jwjvmclvz4o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49364","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49875","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/11/2","tags":["article"]},{"url":"https://lists.apache.org/thread/3kb9w5bg90xcp06fccoz9k3gpsvyy79o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50632","tags":["advisory"]},{"url":"https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5988","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54513","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54513","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5981","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5983","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/5984","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54515","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5962","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5964","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55831","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","tags":["article"]},{"url":"https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55833","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56745","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56746","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59649","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59649","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824","tags":["article"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-59649","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59889","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/6060","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/6056","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59899","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww","tags":["article"]},{"url":"https://netty.io/news/2026/07/09/4-1-136-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-62243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-62243","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/pull/1611","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","tags":["article"]},{"url":"https://github.com/advisories/GHSA-72hv-8253-57qq","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","tags":["advisory"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73508","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86404","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70229","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33580","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70230","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33581","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70230.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264391-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275500","tags":["report"]},{"url":"https://bugzilla.suse.com/1275501","tags":["report"]},{"url":"https://bugzilla.suse.com/1276420","tags":["report"]},{"url":"https://bugzilla.suse.com/1276421","tags":["report"]},{"url":"https://bugzilla.suse.com/1276455","tags":["report"]},{"url":"https://bugzilla.suse.com/1276456","tags":["report"]},{"url":"https://bugzilla.suse.com/1277243","tags":["report"]},{"url":"https://bugzilla.suse.com/1280048","tags":["report"]},{"url":"https://bugzilla.suse.com/1281431","tags":["report"]},{"url":"https://bugzilla.suse.com/1281432","tags":["report"]},{"url":"https://bugzilla.suse.com/1281433","tags":["report"]},{"url":"https://bugzilla.suse.com/1281434","tags":["report"]},{"url":"https://bugzilla.suse.com/1281435","tags":["report"]},{"url":"https://bugzilla.suse.com/1282084","tags":["report"]},{"url":"https://bugzilla.suse.com/1282085","tags":["report"]},{"url":"https://bugzilla.suse.com/1282132","tags":["report"]},{"url":"https://bugzilla.suse.com/1282140","tags":["report"]},{"url":"https://bugzilla.suse.com/1282141","tags":["report"]},{"url":"https://bugzilla.suse.com/1282362","tags":["report"]},{"url":"https://bugzilla.suse.com/1282363","tags":["report"]},{"url":"https://bugzilla.suse.com/1282364","tags":["report"]},{"url":"https://bugzilla.suse.com/1282366","tags":["report"]},{"url":"https://bugzilla.suse.com/1282367","tags":["report"]},{"url":"https://bugzilla.suse.com/1282370","tags":["report"]},{"url":"https://bugzilla.suse.com/1282372","tags":["report"]},{"url":"https://bugzilla.suse.com/1282373","tags":["report"]},{"url":"https://bugzilla.suse.com/1282374","tags":["report"]},{"url":"https://bugzilla.suse.com/1282378","tags":["report"]},{"url":"https://bugzilla.suse.com/1282506","tags":["report"]},{"url":"https://bugzilla.suse.com/1282507","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93579","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-62243","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-62243","title":"Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T12:26:43.072Z","modified":"2026-08-24T19:36:53.644Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-297"],"updated_at":"2026-11-02T14:20:14.999906Z"}],"euvd":[{"id":"EUVD-2026-64271","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T12:26:43Z","modified":"2026-08-24T19:36:53Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:01:34.230875Z"}],"ghsa":[{"id":"GHSA-c3j3-64rf-grvf","title":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions...","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T15:31:02Z","modified":"2026-08-22T15:31:11Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-297"],"updated_at":"2026-11-02T15:10:51.608425Z"}],"nvd":[{"id":"CVE-2026-62243","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T13:16:39.687Z","modified":"2026-10-14T19:10:00.297Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-297"],"updated_at":"2026-11-02T14:12:40.665005Z"}],"osv":[{"id":"CVE-2026-62243","title":"Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T12:26:43.072Z","modified":"2026-10-28T02:30:41.491743461Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-297"],"updated_at":"2026-11-02T15:45:12.933503Z"},{"id":"DEBIAN-CVE-2026-62243","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T13:16:39.687Z","modified":"2026-10-15T09:47:26.697646457Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"RHSA-2026:70228","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:18Z","modified":"2026-10-20T10:14:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70229","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:19Z","modified":"2026-10-20T10:14:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70230","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:20Z","modified":"2026-10-20T10:14:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"UBUNTU-CVE-2026-62243","description":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final.","status":"published","published":"2026-08-22T13:16:00Z","modified":"2026-10-17T12:59:15.276306887Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:56:43.630667Z"},{"id":"openSUSE-SU-2026:11882-1","title":"netty-4.1.138-1.1 on GA media","description":"These are all security issues fixed in the netty-4.1.138-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-09-25T18:23:09.573141425Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:4391-1","title":"Security update for netty, netty-tcnative","description":"This update for netty, netty-tcnative fixes the following issues:\n\n- CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler (bsc#1275501).\n- CVE-2026-59903: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite\n  (bsc#1275500).\n- CVE-2026-62243: TLS hostname verification bypass in Netty OpenSSL client path (bsc#1276455).\n- CVE-2026-62380: null byte and CRLF injection in Socks4ClientEncoder and Socks5ClientEncoder (bsc#1276456).\n- CVE-2026-75595: fragmented TLS `ClientHello` causes fallback to default `SslContext` and allows for SNI routing and\n  mTLS requirement bypass (bsc#1276420).\n- CVE-2026-75596: fragmented `ClientHello`records can trigger quadratic pre-handshake reassembly in default SNI parsing\n  (bsc#1276421).\n- CVE-2026-76816: missing input validation in `MqttEncoder` allows for null-byte injection, topic hijacking, and ACL\n  bypassing (bsc#1277243).\n- CVE-2026-89044: HTTP request smuggling in Netty via improper validation of final Transfer-Encoding coding\n  (bsc#1280048).\n- CVE-2026-93488: Denial of Service via unbounded concurrent SPDY streams (bsc#1282084).\n- CVE-2026-93491: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue (bsc#1282085).\n- CVE-2026-93492: HTTP/2 HpackEncoder DoS with large table size (bsc#1282132).\n- CVE-2026-93493: missing `nextUpdate` field in OCSP responses leads to silent validation bypass (bsc#1281431).\n- CVE-2026-93494: ByteBuf Leak in StompSubframeDecoder When a Frame Body Is Never Terminated (bsc#1282506).\n- CVE-2026-93558: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service\n  (bsc#1282140).\n- CVE-2026-93560: STOMP codec content-length long-to-int truncation causes infinite decode loop DoS (bsc#1282141).\n- CVE-2026-93562: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling (bsc#1282362).\n- CVE-2026-93563: unbounded multi-line response accumulation in `SmtpResponseDecoder` leads to memory exhaustion and a\n  DoS (bsc#1281432).\n- CVE-2026-93564: HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (bsc#1282363).\n- CVE-2026-93565: RtspDecoder Method-Token Smuggling via Trailing Control Byte (bsc#1282364).\n- CVE-2026-93566: HTTP Request Smuggling due to control characters in the chunk-size line (bsc#1282366).\n- CVE-2026-93567: HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled\n  :authority (bsc#1282367).\n- CVE-2026-93568: HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests (bsc#1282370).\n- CVE-2026-93569: HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target\n  authority (bsc#1282372).\n- CVE-2026-93572: multiplication of patched preallocation limits in `RedisArrayAggregator` nested RESP headers can lead\n  to denial of service (bsc#1281433).\n- CVE-2026-93573: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling (bsc#1282373).\n- CVE-2026-93574: HTTP request smuggling via post-digit whitespace in chunk-size parsing (bsc#1282374).\n- CVE-2026-93575: missing validations in the `MqttDecoder` can lead to excessive resource consumption and a DoS\n  (bsc#1281434).\n- CVE-2026-93576: netty-codec-smtp -- SMTP command-name field is not CRLF-validated (bsc#1282507).\n- CVE-2026-93578: missing Extended Key Usage (EKU) check in OCSP client allows certificate revocation bypass\n  (bsc#1281435).\n- CVE-2026-93579: HTTP/2 header field values are not validated by default (bsc#1282378).\n\nChanges for netty:\n\n- Upgrade to upstream version 4.1.138\n\nChanges for netty-tcnative:\n\n- Upgrade to version 2.0.84 Final\n","status":"published","published":"2026-09-29T11:47:41Z","modified":"2026-09-30T12:00:04.604890726Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}