Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

Undertow: improper state management in proxy protocol parsing causes information leakage

Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

Undertow: url-encoded request path information can be broken on ajp-listener

Xnio: stackoverflowexception when the chain of notifier states becomes problematically big

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Undertow: ajp request closes connection exceeding maxrequestsize

Undertow: cookie smuggling/spoofing

Wildfly: wildfly vulnerable to cross-site scripting (xss)

Infinispan: infinispan: rest compare api has buffer leak

Org.wildfly.core:wildfly-server: wildfly improper rbac permission

Jberet: jberet-core logging database credentials

Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss

Keycloak: xss via assertion consumer service url in saml post-binding flow

Narayana: deadlock via multiple join requests sent to lra coordinator

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

Undertow: learningpushhandler can lead to remote memory dos attacks

Undertow: directory traversal vulnerability

Org.jboss.hal:hal-console: wildfly hal console cross-site scripting

Wildfly: no timeout for eap management interface may lead to denial of service (dos)