Vulnerabilities of Red Hat Red Hat build of Quarkus

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-81829	A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed…	5.3 Medium	Sep 17, 2026
CVE-2026-17615	Resteasy-core: resteasy sourceprovider remote unauthenticated file read	7.5 High	Aug 31, 2026
CVE-2026-76763	A flaw was found in SmallRye GraphQL	7.5 High	Aug 31, 2026
CVE-2026-12894	A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or…	8.8 High	Aug 31, 2026
CVE-2026-19611	A flaw was found in WildFly Elytron	7.4 High	Aug 20, 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 High	Jun 25, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Not rated	Apr 22, 2026
CVE-2026-22754	Vulnerability in Spring Spring Security	7.5 High	Apr 22, 2026
CVE-2026-22747	Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509…	6.8 Medium	Apr 22, 2026
CVE-2026-33557	A possible security vulnerability has been identified in Apache Kafka	Not rated	Apr 20, 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 High	Apr 15, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 High	Jan 30, 2026
CVE-2025-14969	A flaw was found in Hibernate Reactive	4.3 Medium	Jan 26, 2026
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	High	Dec 3, 2025
CVE-2024-12225	A vulnerability was found in Quarkus in the quarkus-security-webauthn module	9.1 Critical	May 6, 2025
CVE-2025-2240	Smallrye-fault-tolerance: smallrye fault tolerance	7.5 High	Mar 12, 2025
CVE-2025-1634	A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are…	7.5 High	Feb 26, 2025
CVE-2023-4639	A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming…	7.4 High	Nov 17, 2024
CVE-2023-6841	Keycloak: amount of attributes per object is not limited and it may lead to dos	7.5 High	Sep 10, 2024
CVE-2024-7885	Undertow: improper state management in proxy protocol parsing causes information leakage	7.5 High	Aug 21, 2024
CVE-2024-3653	A vulnerability was found in Undertow	5.3 Medium	Jul 8, 2024

Other Red Hat products