title: Red Hat Security Advisory: Red Hat AMQ Streams 1.4.0 release and security update
description: kafka: Connect REST API exposes plaintext secrets in tasks endpoint jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* jackson-databind: lacks certain net.sf.ehcache blocking netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling
cpes: cpe:/a:redhat:amq_streams:1