Skip to contentQuarkusio Quarkus vulnerabilities
- quarkus, red hat cryostat 4 on rhel 9, openshift serverless +15 more +17 moreAuthentication/Authorization Bypass via Advanced Path Normalization VulnerabilitiesCVE-2026-50559Fix available7.5 High
- quarkus, red hat cryostat 4 on rhel 9, hawtio hawtio 4.4.0 +16 more +18 moreQuarkus authorization bypass via semicolon path normalization inconsistencyCVE-2026-39852Fix available8.8 High
- quarkusQuarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to writeCVE-2025-66560Fix available5.9 Medium
- quarkusio quarkusQuarkus potential data leak when duplicating a duplicated contextCVE-2025-49574Fix available6.4 Medium
- quarkusRestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure PermissionsCVE-2023-0481Fix available3.3 Low
- quarkus, redhat build of quarkus +1 moreCode injection in quarkus dev ui config editorCVE-2022-4116Fix availableEPSS 32.5%9.8 Critical
- quarkusQuarkus does not terminate HTTP requests header contextCVE-2022-2466Public exploitFix available9.8 Critical
- quarkusA flaw was found in Quarkus. The state and potentially associated permissions can leak from one...CVE-2022-09818.8 High