Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    RHSA-2026:83082

    Vulnerability from csaf_redhat - Published: 2026-10-15 18:16 - Updated: 2026-10-15 23:41
    Summary
    Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6 release and security update
    Severity
    Important
    Scope
    24 vulnerabilities in this advisory, including CVE-2026-93879.
    CVE-2026-93879

    A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be re-evaluated during Expression Language (EL) processing, leading to excessive resource consumption and application unresponsiveness.

    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Fixed: 1 product Known not affected: 1032 products
    https://access.redhat.com/errata/RHSA-2026:83082
    Open the full advisory

    RHSA-2026:83520

    Vulnerability from csaf_redhat - Published: 2026-10-15 19:06 - Updated: 2026-10-15 23:41
    Summary
    Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4 release and security update
    Severity
    Important
    Scope
    21 vulnerabilities in this advisory, including CVE-2026-93879.
    CVE-2026-93879

    A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be re-evaluated during Expression Language (EL) processing, leading to excessive resource consumption and application unresponsiveness.

    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Fixed: 1 product Known not affected: 1039 products
    https://access.redhat.com/errata/RHSA-2026:83520
    Open the full advisory