Merge pull request #7652 from OpenLiberty/7648-CVE

Update security-vulnerabilities.adoc
OpenLiberty · Oct 24, 2024 · 7e0f697 · 7e0f697
2 parents 537761e + ded56e3
commit 7e0f697
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/ROOT/pages/security-vulnerabilities.adoc b/modules/ROOT/pages/security-vulnerabilities.adoc
@@ -28,6 +28,13 @@ The `CWWKF0012I` message uses the word "installed", but it lists features that a
 |===
 |CVE |CVSS score by X-Force® |Vulnerability assessment |Versions affected |Version fixed |Notes
 
+|https://www.cve.org/CVERecord?id=CVE-2024-7254[CVE-2024-7254]
+|7.5
+|Denial of service
+|20.0.0.12 - 24.0.0.10
+|24.0.0.11
+|Affects the feature:grpc-1.0[] and feature:grpcClient-1.0[] features
+
 |http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50314[CVE-2023-50314]
 |5.3
 |Information disclosure