Skip to contentRed Hat Build Of Quarkus vulnerabilities
- red hat build of apache camel 4.8 for quarkus 3.15, build of apache camel 4.8.5 for spring boot, build of apicurio registry 2 +8 more +10 moreSmallrye-fault-tolerance: smallrye fault toleranceCVE-2025-2240Fix available7.5 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of quarkus, build of quarkus 3.15.3.sp1 +4 more +6 moreIo.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeoutCVE-2025-1634Fix available7.5 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of quarkus 3.15.3.sp1, build of quarkus 3.8.6.sp3 +2 moreIo.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instanceCVE-2025-1247Fix available8.3 High
- red hat cryostat 3, cryostat 4 on rhel 9, hawtio hawtio 4.2.0 +12 more +14 moreIo.quarkus.http/quarkus-http-core: quarkus http cookie smugglingCVE-2024-12397Fix available7.4 High
- red hat migration toolkit for applications 6, migration toolkit for runtimes 1 on rhel 8, build of apache camel for spring boot 3 +21 more +23 moreUndertow: cookie smuggling/spoofingCVE-2023-4639Fix available7.4 High
- redhat keycloak, red hat build of quarkus, fuse 7 +6 more +8 moreKeycloak: amount of attributes per object is not limited and it may lead to dosCVE-2023-6841Fix available7.5 High
- red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 moreUndertow: improper state management in proxy protocol parsing causes information leakageCVE-2024-7885Fix available7.5 High
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +21 more +23 moreUndertow: learningpushhandler can lead to remote memory dos attacksCVE-2024-3653Fix available5.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.1 for spring boot 3.2 +17 more +19 moreUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticketCVE-2024-5971Fix available7.5 High
- red hat build of quarkus, build of quarkus 3.2.11.final +1 moreQuarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of serviceCVE-2024-1726Fix available5.3 Medium
- red hat a-mq clients 2, cryostat 2, openshift serverless +9 more +11 moreQuarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.CVE-2023-5675Fix available6.5 Medium
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +18 more +20 moreKeycloak: xss via assertion consumer service url in saml post-binding flowCVE-2023-6717Fix available6.0 Medium
- redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 moreKeycloak: path transversal in redirection validationCVE-2024-1132Fix available8.1 High
- red hat hawtio 4.0.0 for red hat build of apache camel 4, amq streams 2.7.0, build of apache camel 4 for quarkus 3 +9 more +11 moreQuarkus-core: leak of local configuration properties into quarkus applicationsCVE-2024-2700Fix available7.0 High
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni supportCVE-2024-1300Fix available5.4 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxCVE-2024-1023Fix available6.5 Medium
- red hat build of quarkus, build of quarkus 3.2.11.final +1 moreQuarkus: information leak in annotationCVE-2024-1979Fix available3.5 Low
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolCVE-2024-1635Fix available7.5 High
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: directory traversal vulnerabilityCVE-2024-1459Fix available5.3 Medium
- quarkus, red hat build of optaplanner 8, build of quarkus 2.13.9.final +4 more +6 moreQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.CVE-2023-6267Fix available8.6 High
- infinispan, red hat build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +13 more +15 moreInfinispan: circular reference on marshalling leads to dosCVE-2023-5236Fix available4.4 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: ajp request closes connection exceeding maxrequestsizeCVE-2023-5379Fix available7.5 High
- quarkus, red hat build of quarkus, build of quarkus 2.13.9 +1 more +3 moreQuarkus: graphql operations over websockets bypassCVE-2023-6394Fix available7.4 High
- red hat build of quarkusQuarkus: potential invalid reuse of context when @cacheresult on a uni is usedCVE-2023-6393Fix available5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty's wrapping plain trust manager silently disables hostname verificationCVE-2026-50010Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 moreNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory ExhaustionCVE-2026-48059Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043Fix available5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty has Insufficient Bailiwick Validation for NS RecordsCVE-2026-47691Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME RecordsCVE-2026-45674Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +23 more +25 moreNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthCVE-2026-44893Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249Fix available8.1 High
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSCVE-2026-42587Fix available7.5 High
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronizationCVE-2026-42584Fix available7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581Fix available5.8 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)CVE-2026-42579Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- quarkus, red hat build of quarkus 2.13.8.final, rhint service registry 2.5.4 ga +2 moreQuarkus-oidc: id and access tokens leak via the authorization code flowCVE-2023-1584Fix available7.5 High
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 moreQuarkus: http security policy bypassCVE-2023-4853Fix available8.1 High
- red hat build of quarkus 2.13.8.final, redhat build of quarkus +1 moreQuarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolCVE-2023-2974Fix available6.5 Medium
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 moreDrools: unsafe data deserialization in streamutilsCVE-2022-1415Fix available8.1 High