Red Hat Security Advisory: Red Hat Integration Camel-K 1.8 security update
hadoop: WebHDFS client might send SPNEGO authorization header jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS jackson-databind: denial of service via a large depth of nested objects mysql-connector-java: unauthorized access to critical lz4: memory corruption due to an integer overflow bug caused by memmove argument undertow: potential security issue in flow control over HTTP/2 may lead to DOS resteasy: Error message exposes endpoint class information elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw when Document or Field Level Security is used jetty: Symlink directory exposes webapp directory contents jetty: Ambiguous paths can access WEB-INF jetty: Resource exhaustion when receiving an invalid large TLS frame jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xml-security: XPath Transform abuse allows for information disclosure
cpe:/a:redhat:integration:1