Red Hat build of Apicurio Registry 3.3.1 vulnerabilities

3 known vulnerabilities in Red Hat build of Apicurio Registry 3.3.1 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Red Hat build of Apicurio Registry 3.3.1: Server-Side Request Forgery

  CVE-2026-12992Jun 25, 2026Red Hat

  A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document contain

• 8.5 High severity

  Red Hat build of Apicurio Registry 3.3.1: Improper Restriction of XML External Entity Reference

  CVE-2026-12975Jun 25, 2026Red Hat

  A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission (or unauthenticated whe

• 7.5 High severity

  axios: Uncontrolled Resource Consumption

  CVE-2026-44496Jun 11, 2026AxiosEPSS 5.41%

  Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard