Skip to content
Heist/ feed
Back to feed
CriticalFix available

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Type: advisorySources: OSV
Products
eap7-apache-cxf, eap7-apache-cxf-rt, eap7-apache-cxf-services, eap7-apache-cxf-tools, eap7-eclipse-jgit, eap7-hibernate, eap7-hibernate-core, eap7-hibernate-entitymanager, eap7-hibernate-envers, eap7-hibernate-java8, eap7-jboss-marshalling, eap7-jboss-marshalling-river, eap7-netty, eap7-netty-all, eap7-netty-buffer, eap7-netty-codec, eap7-netty-codec-dns, eap7-netty-codec-haproxy, eap7-netty-codec-http, eap7-netty-codec-http2, eap7-netty-codec-memcache, eap7-netty-codec-mqtt, eap7-netty-codec-redis, eap7-netty-codec-smtp, eap7-netty-codec-socks, eap7-netty-codec-stomp, eap7-netty-codec-xml, eap7-netty-common, eap7-netty-handler, eap7-netty-handler-proxy, eap7-netty-resolver, eap7-netty-resolver-dns, eap7-netty-resolver-dns-classes-macos, eap7-netty-transport, eap7-netty-transport-classes-epoll, eap7-netty-transport-classes-kqueue, eap7-netty-transport-native-epoll, eap7-netty-transport-native-epoll-debuginfo, eap7-netty-transport-native-unix-common, eap7-netty-transport-sctp, eap7-undertow, eap7-wildfly, eap7-wildfly-java-jdk11, eap7-wildfly-java-jdk17, eap7-wildfly-java-jdk8, eap7-wildfly-javadocs, eap7-wildfly-modules
Affected versions
Not specified
Fixed versions
0:2.0.16-1.Final_redhat_00001.1.el8eap, 0:2.2.39-1.Final_redhat_00001.1.el8eap, 0:3.5.11-1.SP1_redhat_00001.1.el8eap, 0:4.1.124-1.Final_redhat_00001.1.el8eap, 0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap, 0:5.3.38-1.Final_redhat_00001.1.el8eap, 0:7.4.24-4.GA_redhat_00002.1.el8eap
CVEs
CVE-2024-3884, CVE-2024-7254, CVE-2025-12543, CVE-2025-48913, CVE-2025-4949, CVE-2025-52999, CVE-2025-55163, CVE-2025-9784, CVE-2026-0603
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 09:12 UTC · Revision 1

Source evidence

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

core-osv · Original source

Published 19 Mar 2026, 10:20 UTC

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

osv:RHSA-2026:4916

eap7-undertow

Fixed versions: 0:2.2.39-1.Final_redhat_00001.1.el8eap

eap7-wildfly

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-wildfly-java-jdk11

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-wildfly-java-jdk17

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-wildfly-java-jdk8

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-wildfly-javadocs

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-wildfly-modules

Fixed versions: 0:7.4.24-4.GA_redhat_00002.1.el8eap

eap7-jboss-marshalling

Fixed versions: 0:2.0.16-1.Final_redhat_00001.1.el8eap

eap7-jboss-marshalling-river

Fixed versions: 0:2.0.16-1.Final_redhat_00001.1.el8eap

eap7-eclipse-jgit

Fixed versions: 0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap

eap7-apache-cxf

Fixed versions: 0:3.5.11-1.SP1_redhat_00001.1.el8eap

eap7-apache-cxf-rt

Fixed versions: 0:3.5.11-1.SP1_redhat_00001.1.el8eap

eap7-apache-cxf-services

Fixed versions: 0:3.5.11-1.SP1_redhat_00001.1.el8eap

eap7-apache-cxf-tools

Fixed versions: 0:3.5.11-1.SP1_redhat_00001.1.el8eap

eap7-netty

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-all

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-buffer

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-dns

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-haproxy

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-http

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-http2

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-memcache

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-mqtt

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-redis

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-smtp

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-socks

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-stomp

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-codec-xml

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-common

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-handler

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-handler-proxy

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-resolver

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-resolver-dns

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-resolver-dns-classes-macos

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-classes-epoll

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-classes-kqueue

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-native-epoll

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-native-epoll-debuginfo

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-native-unix-common

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-netty-transport-sctp

Fixed versions: 0:4.1.124-1.Final_redhat_00001.1.el8eap

eap7-hibernate

Fixed versions: 0:5.3.38-1.Final_redhat_00001.1.el8eap

eap7-hibernate-core

Fixed versions: 0:5.3.38-1.Final_redhat_00001.1.el8eap

eap7-hibernate-entitymanager

Fixed versions: 0:5.3.38-1.Final_redhat_00001.1.el8eap

eap7-hibernate-envers

Fixed versions: 0:5.3.38-1.Final_redhat_00001.1.el8eap

eap7-hibernate-java8

Fixed versions: 0:5.3.38-1.Final_redhat_00001.1.el8eap

Complete source record
{
  "id": "13f69460c8268e3c246cea2b622ba4a2d640e654d63c9793a8bc07e18699de74",
  "url": "https://osv.dev/vulnerability/RHSA-2026%3A4916",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update",
    "summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update",
    "evidence": "osv:RHSA-2026:4916",
    "products": [
      {
        "name": {
          "value": "eap7-undertow",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.2.39-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly-java-jdk11",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly-java-jdk17",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly-java-jdk8",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly-javadocs",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-wildfly-modules",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:7.4.24-4.GA_redhat_00002.1.el8eap",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-jboss-marshalling",
          "evidence": "/affected/7/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.0.16-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/7/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-jboss-marshalling-river",
          "evidence": "/affected/8/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.0.16-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/8/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-eclipse-jgit",
          "evidence": "/affected/9/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap",
            "evidence": "/affected/9/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-apache-cxf",
          "evidence": "/affected/10/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:3.5.11-1.SP1_redhat_00001.1.el8eap",
            "evidence": "/affected/10/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-apache-cxf-rt",
          "evidence": "/affected/11/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:3.5.11-1.SP1_redhat_00001.1.el8eap",
            "evidence": "/affected/11/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-apache-cxf-services",
          "evidence": "/affected/12/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:3.5.11-1.SP1_redhat_00001.1.el8eap",
            "evidence": "/affected/12/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-apache-cxf-tools",
          "evidence": "/affected/13/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:3.5.11-1.SP1_redhat_00001.1.el8eap",
            "evidence": "/affected/13/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty",
          "evidence": "/affected/14/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/14/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-all",
          "evidence": "/affected/15/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/15/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-buffer",
          "evidence": "/affected/16/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/16/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec",
          "evidence": "/affected/17/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/17/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-dns",
          "evidence": "/affected/18/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/18/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-haproxy",
          "evidence": "/affected/19/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/19/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-http",
          "evidence": "/affected/20/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/20/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-http2",
          "evidence": "/affected/21/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/21/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-memcache",
          "evidence": "/affected/22/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/22/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-mqtt",
          "evidence": "/affected/23/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/23/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-redis",
          "evidence": "/affected/24/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/24/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-smtp",
          "evidence": "/affected/25/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/25/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-socks",
          "evidence": "/affected/26/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/26/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-stomp",
          "evidence": "/affected/27/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/27/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-codec-xml",
          "evidence": "/affected/28/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/28/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-common",
          "evidence": "/affected/29/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/29/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-handler",
          "evidence": "/affected/30/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/30/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-handler-proxy",
          "evidence": "/affected/31/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/31/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-resolver",
          "evidence": "/affected/32/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/32/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-resolver-dns",
          "evidence": "/affected/33/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/33/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-resolver-dns-classes-macos",
          "evidence": "/affected/34/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/34/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport",
          "evidence": "/affected/35/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/35/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-classes-epoll",
          "evidence": "/affected/36/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/36/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-classes-kqueue",
          "evidence": "/affected/37/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/37/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-native-epoll",
          "evidence": "/affected/38/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/38/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-native-epoll-debuginfo",
          "evidence": "/affected/39/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/39/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-native-unix-common",
          "evidence": "/affected/40/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/40/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-netty-transport-sctp",
          "evidence": "/affected/41/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.1.124-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/41/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-hibernate",
          "evidence": "/affected/42/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.3.38-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/42/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-hibernate-core",
          "evidence": "/affected/43/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.3.38-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/43/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-hibernate-entitymanager",
          "evidence": "/affected/44/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.3.38-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/44/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-hibernate-envers",
          "evidence": "/affected/45/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.3.38-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/45/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "eap7-hibernate-java8",
          "evidence": "/affected/46/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:5.3.38-1.Final_redhat_00001.1.el8eap",
            "evidence": "/affected/46/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "RHSA-2026:4916",
      "aliases": [
        "RHSA-2026:4916"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.2.39-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-undertow",
            "purl": "pkg:rpm/redhat/eap7-undertow",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly",
            "purl": "pkg:rpm/redhat/eap7-wildfly",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly-java-jdk11",
            "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk11",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly-java-jdk17",
            "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk17",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly-java-jdk8",
            "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk8",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly-javadocs",
            "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:7.4.24-4.GA_redhat_00002.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-wildfly-modules",
            "purl": "pkg:rpm/redhat/eap7-wildfly-modules",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.0.16-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-jboss-marshalling",
            "purl": "pkg:rpm/redhat/eap7-jboss-marshalling",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.0.16-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-jboss-marshalling-river",
            "purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-eclipse-jgit",
            "purl": "pkg:rpm/redhat/eap7-eclipse-jgit",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:3.5.11-1.SP1_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-apache-cxf",
            "purl": "pkg:rpm/redhat/eap7-apache-cxf",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:3.5.11-1.SP1_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-apache-cxf-rt",
            "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:3.5.11-1.SP1_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-apache-cxf-services",
            "purl": "pkg:rpm/redhat/eap7-apache-cxf-services",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:3.5.11-1.SP1_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-apache-cxf-tools",
            "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty",
            "purl": "pkg:rpm/redhat/eap7-netty",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-all",
            "purl": "pkg:rpm/redhat/eap7-netty-all",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-buffer",
            "purl": "pkg:rpm/redhat/eap7-netty-buffer",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec",
            "purl": "pkg:rpm/redhat/eap7-netty-codec",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-dns",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-dns",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-haproxy",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-haproxy",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-http",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-http",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-http2",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-http2",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-memcache",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-memcache",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-mqtt",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-mqtt",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-redis",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-redis",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-smtp",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-smtp",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-socks",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-socks",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-stomp",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-stomp",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-codec-xml",
            "purl": "pkg:rpm/redhat/eap7-netty-codec-xml",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-common",
            "purl": "pkg:rpm/redhat/eap7-netty-common",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-handler",
            "purl": "pkg:rpm/redhat/eap7-netty-handler",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-handler-proxy",
            "purl": "pkg:rpm/redhat/eap7-netty-handler-proxy",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-resolver",
            "purl": "pkg:rpm/redhat/eap7-netty-resolver",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-resolver-dns",
            "purl": "pkg:rpm/redhat/eap7-netty-resolver-dns",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-resolver-dns-classes-macos",
            "purl": "pkg:rpm/redhat/eap7-netty-resolver-dns-classes-macos",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport",
            "purl": "pkg:rpm/redhat/eap7-netty-transport",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-classes-epoll",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-classes-epoll",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-classes-kqueue",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-classes-kqueue",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-native-epoll",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-native-epoll",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-native-epoll-debuginfo",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-native-epoll-debuginfo",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-native-unix-common",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-native-unix-common",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.1.124-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-netty-transport-sctp",
            "purl": "pkg:rpm/redhat/eap7-netty-transport-sctp",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.3.38-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-hibernate",
            "purl": "pkg:rpm/redhat/eap7-hibernate",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.3.38-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-hibernate-core",
            "purl": "pkg:rpm/redhat/eap7-hibernate-core",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.3.38-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-hibernate-entitymanager",
            "purl": "pkg:rpm/redhat/eap7-hibernate-entitymanager",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.3.38-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-hibernate-envers",
            "purl": "pkg:rpm/redhat/eap7-hibernate-envers",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:5.3.38-1.Final_redhat_00001.1.el8eap"
                }
              ]
            }
          ],
          "package": {
            "name": "eap7-hibernate-java8",
            "purl": "pkg:rpm/redhat/eap7-hibernate-java8",
            "ecosystem": "Red Hat:jboss_enterprise_application_platform_els:7.4::el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:4916.json"
          }
        }
      ],
      "modified": "2026-10-20T10:10:08Z",
      "provider": "osv",
      "upstream": [
        "CVE-2024-3884",
        "CVE-2024-7254",
        "CVE-2025-12543",
        "CVE-2025-48913",
        "CVE-2025-4949",
        "CVE-2025-52999",
        "CVE-2025-55163",
        "CVE-2025-9784",
        "CVE-2026-0603"
      ],
      "references": [
        "https://access.redhat.com/errata/RHSA-2026:4916",
        "https://access.redhat.com/security/updates/classification/#important",
        "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4",
        "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2275287",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2313454",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2367730",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2374804",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2387221",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2388252",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2392306",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2408784",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2427147",
        "https://issues.redhat.com/browse/JBEAP-30075",
        "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4916.json",
        "https://access.redhat.com/security/cve/CVE-2024-3884",
        "https://www.cve.org/CVERecord?id=CVE-2024-3884",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-3884",
        "https://access.redhat.com/security/cve/CVE-2024-7254",
        "https://www.cve.org/CVERecord?id=CVE-2024-7254",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-7254",
        "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa",
        "https://access.redhat.com/security/cve/CVE-2025-4949",
        "https://www.cve.org/CVERecord?id=CVE-2025-4949",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-4949",
        "https://gitlab.eclipse.org/security/cve-assignement/-/issues/64",
        "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281",
        "https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1",
        "https://access.redhat.com/security/cve/CVE-2025-9784",
        "https://www.cve.org/CVERecord?id=CVE-2025-9784",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-9784",
        "https://github.com/undertow-io/undertow/pull/1778",
        "https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final",
        "https://issues.redhat.com/browse/UNDERTOW-2598",
        "https://kb.cert.org/vuls/id/767506",
        "https://access.redhat.com/security/cve/CVE-2025-12543",
        "https://www.cve.org/CVERecord?id=CVE-2025-12543",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-12543",
        "https://access.redhat.com/security/cve/CVE-2025-48913",
        "https://www.cve.org/CVERecord?id=CVE-2025-48913",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-48913",
        "https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83",
        "https://access.redhat.com/security/cve/CVE-2025-52999",
        "https://www.cve.org/CVERecord?id=CVE-2025-52999",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-52999",
        "https://github.com/FasterXML/jackson-core/pull/943",
        "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3",
        "https://access.redhat.com/security/cve/CVE-2025-55163",
        "https://www.cve.org/CVERecord?id=CVE-2025-55163",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
        "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
        "https://access.redhat.com/security/cve/CVE-2026-0603",
        "https://www.cve.org/CVERecord?id=CVE-2026-0603",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-0603"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2024-3884",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-7254",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-12543",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-48913",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-4949",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-52999",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-55163",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-9784",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-0603",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 378445,
  "published_at": "2026-03-19T10:20:31+00:00"
}