Threats Tagged 'cve-2026-93879'

Red Hat has released an important security update for the Red Hat build of Quarkus 3.33.4 that addresses multiple vulnerabilities across various components including jackson-databind, jackson-core, Hibernate Validator, MongoDB Java Driver, RESTEasy, and others. The update fixes issues such as denial of service, path traversal, information disclosure, cross-site scripting, memory leaks, and certificate validation bypass. These vulnerabilities affect the Quarkus 3.33 build and related libraries. The advisory recommends applying this update after ensuring all previous errata are applied.

Red Hat has released an important security update for its build of Quarkus, version 3.27.6, addressing multiple vulnerabilities across various components including jackson-databind, jackson-core, Hibernate Validator, MongoDB Java Driver, RESTEasy, FreeMarker, Qute template engine, MariaDB Connector/J, lz4-java, Micrometer, and Bouncy Castle. These vulnerabilities include denial of service, information disclosure, path traversal, cross-site scripting, memory leaks, and authentication bypass issues. The update consolidates fixes for numerous CVEs, improving the security posture of the affected components.