Skip to content
Quarkusio vulnerabilities
Newest
-
quarkus, red hat cryostat 4 on rhel 9, openshift serverless +15 more +17 more
Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
CVE-2026-50559
Fix available
7.5 High
-
quarkus, red hat cryostat 4 on rhel 9, hawtio hawtio 4.4.0 +16 more +18 more
Quarkus authorization bypass via semicolon path normalization inconsistency
CVE-2026-39852
Fix available
8.8 High
-
quarkus
Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write
CVE-2025-66560
Fix available
5.9 Medium
-
quarkusio quarkus
Quarkus potential data leak when duplicating a duplicated context
CVE-2025-49574
Fix available
6.4 Medium
-
quarkus
RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions
CVE-2023-0481
Fix available
3.3 Low
-
quarkus, redhat build of quarkus +1 more
Code injection in quarkus dev ui config editor
CVE-2022-4116
Fix available
EPSS 32.5%
9.8 Critical
-
quarkus
Quarkus does not terminate HTTP requests header context
CVE-2022-2466
Public exploitFix available
9.8 Critical
-
quarkus
A flaw was found in Quarkus. The state and potentially associated permissions can leak from one...
CVE-2022-0981
8.8 High