Known vulnerabilities in Red Hat build of Debezium 3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 High	May 13, 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-39852	Quarkus is a Java framework for building cloud-native applications	8.8 High	May 5, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2026-33557	A possible security vulnerability has been identified in Apache Kafka	Not rated	Apr 20, 2026
CVE-2026-5588	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	6.3 Medium	Apr 15, 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 High	Apr 15, 2026
CVE-2026-0636	Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the…	5.5 Medium	Apr 15, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 High	Apr 14, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026

Other Red Hat products