Red Hat build of OptaPlanner 8 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest Red Hat build of OptaPlanner 8 vulnerabilities

CVE-2026-0603 — Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVSS 8.3)
CVE-2024-11831 — Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript (CVSS 5.4)
CVE-2024-12397 — Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling (CVSS 7.4)
CVE-2024-3653 — Undertow: learningpushhandler can lead to remote memory dos attacks (CVSS 5.3)
CVE-2023-5675 — Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. (CVSS 6.5)
CVE-2024-2700 — Quarkus-core: leak of local configuration properties into quarkus applications (CVSS 7.0)
CVE-2024-1300 — Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support (CVSS 5.4)
CVE-2024-1023 — Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx (CVSS 6.5)