Red Hat Build of Debezium 3.2 vulnerabilities

2 known vulnerabilities in Red Hat Build of Debezium 3.2 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  c3p0: Improper Control of Generation of Code

  CVE-2026-27830Feb 26, 2026Swaldman

  c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances. Several c3p0 `ConnectionPoolDataSource` implementations have a property called `userOverridesAsString` whic

• 9.8 Critical severity

  mchange-commons-java: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-27727Feb 25, 2026Swaldman

  mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downloaded and invoked within a running appli