Infinispan: infinispan: rest compare api has buffer leak

Org.wildfly.core:wildfly-server: wildfly improper rbac permission

Jberet: jberet-core logging database credentials

Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss

Keycloak: xss via assertion consumer service url in saml post-binding flow

Narayana: deadlock via multiple join requests sent to lra coordinator

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4

Undertow: learningpushhandler can lead to remote memory dos attacks

Undertow: directory traversal vulnerability

Org.jboss.hal:hal-console: wildfly hal console cross-site scripting

Codehaus-plexus: xml external entity (xxe) injection

Wildfly: no timeout for eap management interface may lead to denial of service (dos)