4.3
Medium
CVE-2026-119542 A flaw was found in the Ickle query parser in Infinispan
Description
A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULK_READ permission who can submit a cache query may trigger the issue, potentially affecting availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat build of Apache Camel 4 for Quarkus 3 | Versions not published | |
| Red Hat Data Grid 8 | Versions not published | |
| Red Hat Fuse 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions not published |
Other CVEs of Red Hat build of Apache Camel 4 for Quarkus 3
The 75 CVEs of Red Hat build of Apache Camel 4 for Quarkus 3 →
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
High
CVE-2026-120971
A flaw was found in RESTEasy's default exception mapper
5.3
Medium
CVE-2026-94449
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
7.5
High
CVE-2026-93562
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
6.5
Medium