Threats tagged 'ghsa-6w3j-2wqp-7r38'

CVE-2026-93579 is a medium severity vulnerability in Netty's HTTP/2 stack used by Red Hat Build of Debezium 3.6. It allows remote attackers to inject prohibited characters such as NUL, Line Feed, and Carriage Return into HTTP/2 header field values due to insufficient validation. This can lead to HTTP request smuggling, header injection, or response splitting when crossing HTTP/2 to HTTP/1.1 translation boundaries, potentially causing unauthorized access or data manipulation. A security update addressing this issue is available in Red Hat build of Quarkus 3.27.5.SP2. Users are advised to apply this update to mitigate the vulnerability.