jboss_eap_xp_5_0_update vulnerabilities
CVEs whose affected-version data names the jboss_eap_xp_5_0_update package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-66566High· 7.5yawkat LZ4 Java provides LZ4 compression for Java
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted …
▾ TwilightRed Hat · Cryostat 4 on RHEL 9EPSS 0.60%via NVD
CVE-2024-8447Medium· 5.9A security issue was discovered in the LRA Coordinator component of Narayana
A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the applicatio…
▾ SunlitRed Hat · Red Hat JBoss EAP 8.0 for RHEL 8EPSS 0.68%via NVD