Advisories · Technology

quarkus-qute.

Every CVE that names quarkus-qute among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12894 CVE record

CVSS 8.8 High

Io.quarkus:quarkus-qute: quarkus-qute:server-side template injection (ssti) vulnerability in reflectionvalueresolver of the quarkus qute template engine
- quarkus-qute
- Red Hat Build of Apache Camel 3.33.3.SP1
- Code injection
Not analysed yet 31 Aug 2026