<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-amq-broker-7</title><description>Every new CVE for red-hat-amq-broker-7.</description><link>https://agentprime.io/</link><item><title>CVE-2026-96453: Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates</title><link>https://agentprime.io/advisories/CVE-2026-96453/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96453/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 17:15:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93998: Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer</title><link>https://agentprime.io/advisories/CVE-2026-93998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93998/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 17:15:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101292: Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization</title><link>https://agentprime.io/advisories/CVE-2026-101292/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101292/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Sep 2026 12:44:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93562: Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling</title><link>https://agentprime.io/advisories/CVE-2026-93562/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93562/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 20:12:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93574: Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing</title><link>https://agentprime.io/advisories/CVE-2026-93574/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93574/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 20:12:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93579: Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)</title><link>https://agentprime.io/advisories/CVE-2026-93579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93579/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:38:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93573: Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling</title><link>https://agentprime.io/advisories/CVE-2026-93573/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93573/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:44:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93568: Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests</title><link>https://agentprime.io/advisories/CVE-2026-93568/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93568/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:34:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93569: Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority</title><link>https://agentprime.io/advisories/CVE-2026-93569/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93569/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:27:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93567: Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority</title><link>https://agentprime.io/advisories/CVE-2026-93567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93567/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:23:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93566: Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line</title><link>https://agentprime.io/advisories/CVE-2026-93566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93566/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:19:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93565: Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte</title><link>https://agentprime.io/advisories/CVE-2026-93565/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93565/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:18:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93564: Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)</title><link>https://agentprime.io/advisories/CVE-2026-93564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93564/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:13:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93558: Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service</title><link>https://agentprime.io/advisories/CVE-2026-93558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93558/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:09:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93492: Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size</title><link>https://agentprime.io/advisories/CVE-2026-93492/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93492/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 12:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93491: Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue</title><link>https://agentprime.io/advisories/CVE-2026-93491/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93491/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 12:43:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93488: Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams</title><link>https://agentprime.io/advisories/CVE-2026-93488/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93488/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 11:47:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93575: Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder</title><link>https://agentprime.io/advisories/CVE-2026-93575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93575/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 10:53:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86404: Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default</title><link>https://agentprime.io/advisories/CVE-2026-86404/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86404/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 11:35:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58712: Amq: privilege escalation via excessive /etc/passwd permissions</title><link>https://agentprime.io/advisories/CVE-2025-58712/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58712/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Oct 2025 18:19:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4066: Operator: passwords defined in secrets shown in statefulset yaml</title><link>https://agentprime.io/advisories/CVE-2023-4066/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4066/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Sep 2023 20:54:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4065: Operator: plaintext password in operator log</title><link>https://agentprime.io/advisories/CVE-2023-4065/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4065/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2023 13:25:23 GMT</pubDate><category>CVE</category></item></channel></rss>