quarkus
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-12225 | < 3.15.3.1 | Io.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass | CRITICAL 9.1 | 0.4 % | ||
| CVE-2024-1979 | < 3.2.11 | Quarkus: information leak in annotation | LOW 3.5 | 0.6 % | ||
| CVE-2023-0481 | Fixed in 2.16.1 | In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp fi | LOW 3.3 | 0.2 % | ||
| CVE-2022-4116 | quarkus-2 | A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks l | CRITICAL 9.8 | 33 % | ||
| CVE-2022-2466 | quarkus 2.10.3 | It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior. | CRITICAL 9.8 | 1.9 % | ||
| CVE-2022-0981 | quarkus 2.7.1.Final | A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. | HIGH 8.8 | 1.2 % |