title: Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.4 GA]
description: quarkus-oidc: ID and access tokens leak via the authorization code flow quarkus: HTTP security policy bypass snappy-java: Unchecked chunk length leads to DoS netty: SniHandler 16MB allocation leads to OOM HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
cpes: cpe:/a:redhat:service_registry:2.5