https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 06:53:13 +0000 https://db.gcve.eu/vuln/cve-2026-93488 <p><strong>Affected:</strong> Red Hat Build of Apache Camel 3.33.3.SP2, Red Hat Build of Debezium 3.6, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat build of Quarkus 3.27.5.SP2, Red Hat build of Quarkus 3.33.3.SP2, Red Hat JBoss Enterprise Application Platform 8.1, Red Hat AMQ Broker 7 and 8 more</p> <p>A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAX_VALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYN_STREAM frames with FLAG_FIN=0, causing unbounded heap and direct memory allocation that can lead to JVM OutOfMemoryError and a denial of service.</p> <p><strong>Affected:</strong> Red Hat Build of Apache Camel 3.33.3.SP2, Red Hat Build of Debezium 3.6, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat build of Quarkus 3.27.5.SP2, Red Hat build of Quarkus 3.33.3.SP2, Red Hat JBoss Enterprise Application Platform 8.1, Red Hat AMQ Broker 7 and 8 more</p> <p>A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAX_VALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYN_STREAM frames with FLAG_FIN=0, causing unbounded heap and direct memory allocation that can lead to JVM OutOfMemoryError and a denial of service.</p> https://db.gcve.eu/vuln/cve-2026-93488