title: Red Hat Security Advisory: Red Hat support for Spring Boot 2.7.13 security update
description: jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode SnakeYaml: Constructor Deserialization Remote Code Execution reactor-netty-http: Log request headers in some cases of invalid HTTP requests tomcat: JsonErrorReportValve injection Undertow: Infinite loop in SslConduit during close springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern springframework: Spring Expression DoS Vulnerability
cpes: cpe:/a:redhat:openshift_application_runtimes:1.0