| Name | Description | Introduced in Version |
|---|---|---|
| Schema Registry: Solace Avro SERDES for .NET |
Enables schema-enforced messaging in applications built with the Solace Messaging API for .NET using the Avro serializer and deserializer (SERDES). Validates payloads against schemas in Solace Schema Registry, auto-registers schemas, resolves schema references, selects schemas by topic or record name, and improves performance through caching.
|
1.2.0 |
| Resolved in Version | Severity (CVSS v3 Score) | Vulnerability ID | Solace Reference Number | Affected Products | Description |
|---|---|---|---|---|---|
| 1.2.0 | CVSS v3: 7.0 (HIGH) | EBP-2456 | Nuget |
The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target.
|