<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-jboss-enterprise-application-platform-8-1</title><description>Every new CVE for red-hat-jboss-enterprise-application-platform-8-1.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93579: Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)</title><link>https://agentprime.io/advisories/CVE-2026-93579/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93579/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:38:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93568: Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests</title><link>https://agentprime.io/advisories/CVE-2026-93568/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93568/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:34:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93569: Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority</title><link>https://agentprime.io/advisories/CVE-2026-93569/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93569/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:27:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93567: Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority</title><link>https://agentprime.io/advisories/CVE-2026-93567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93567/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 14:23:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93492: Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size</title><link>https://agentprime.io/advisories/CVE-2026-93492/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93492/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 12:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89058: Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config</title><link>https://agentprime.io/advisories/CVE-2026-89058/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89058/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 07:20:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89059: Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)</title><link>https://agentprime.io/advisories/CVE-2026-89059/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89059/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 07:13:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17615: Resteasy-core: resteasy sourceprovider remote unauthenticated file read</title><link>https://agentprime.io/advisories/CVE-2026-17615/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17615/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 31 Aug 2026 16:15:01 GMT</pubDate><category>CVE</category></item></channel></rss>