Build Of Apicurio Registry vulnerabilities

2 known vulnerabilities in Build Of Apicurio Registry from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Red Hat build of Apicurio Registry 3.3.1: Server-Side Request Forgery

  CVE-2026-12992Jun 25, 2026Red Hat

  A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document contain

• 8.5 High severity

  Red Hat build of Apicurio Registry 3.3.1: Improper Restriction of XML External Entity Reference

  CVE-2026-12975Jun 25, 2026Red Hat

  A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission (or unauthenticated whe