Threats Tagged 'cve-2025-2240'

Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Security Fix(es): * jenkins-2-plugins: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) (CVE-2024-57699) * jenkins: CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length (CVE-2025-22228) * jenkins: Jetty HTTP/2 Header List Size Vulnerability (CVE-2025-1948) * jenkins: jackson-core Potential StackoverflowError (CVE-2025-52999) * jenkins-2-plugins: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Red Hat has released an important security update for the Red Hat build of Quarkus 3.15.4 that addresses CVE-2025-2240, a vulnerability in the SmallRye Fault Tolerance component. This update fixes a security issue rated as important by Red Hat Product Security. The advisory recommends applying the update after ensuring all previous errata are applied. The update also includes various other fixes and improvements unrelated to the vulnerability. No CVSS score is provided for this vulnerability.