Advisories · Technology
Red Hat build of Quarkus 3.27.6.redhat.
Every CVE that names Red Hat build of Quarkus 3.27.6.redhat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- Broken access control
- CVSS 6.5 Medium
Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- CWE-20
- CVSS 7.5 High
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
- Red Hat Build of Apache Camel 3.33.4.redhat
- Red Hat build of Quarkus 3.27.6.redhat
- Denial of service
- CVSS 6.1 Medium
Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- Cross-site scripting (XSS)
- CVSS 7.4 High
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-346
- CWE-942
- CVSS 7.5 High
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-409