Vulnérabilités connues pour Red Hat build of Quarkus

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-87742	A flaw was found in quarkus-websockets-next	7.5 Élevée	17 sept. 2026
CVE-2026-81829	A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed…	5.3 Moyenne	17 sept. 2026
CVE-2026-17615	Resteasy-core: resteasy sourceprovider remote unauthenticated file read	7.5 Élevée	31 août 2026
CVE-2026-76763	A flaw was found in SmallRye GraphQL	7.5 Élevée	31 août 2026
CVE-2026-12894	A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or…	8.8 Élevée	31 août 2026
CVE-2026-19611	Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding	7.4 Élevée	20 août 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 Élevée	25 juin 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 Élevée	23 juin 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-40542	Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept…	Non notée	22 avr. 2026
CVE-2026-22754	Vulnerability in Spring Spring Security	7.5 Élevée	22 avr. 2026
CVE-2026-22747	Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509…	6.8 Moyenne	22 avr. 2026
CVE-2026-33557	A possible security vulnerability has been identified in Apache Kafka	Non notée	20 avr. 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 Élevée	15 avr. 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 Élevée	27 mars 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 Élevée	30 janv. 2026
CVE-2025-14969	A flaw was found in Hibernate Reactive	4.3 Moyenne	26 janv. 2026
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	Élevée	3 déc. 2025
CVE-2024-12225	A vulnerability was found in Quarkus in the quarkus-security-webauthn module	9.1 Critique	6 mai 2025
CVE-2025-2240	Smallrye-fault-tolerance: smallrye fault tolerance	7.5 Élevée	12 mars 2025
CVE-2025-1634	A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are…	7.5 Élevée	26 févr. 2025
CVE-2023-4639	A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming…	7.4 Élevée	17 nov. 2024
CVE-2023-6841	Keycloak: amount of attributes per object is not limited and it may lead to dos	7.5 Élevée	10 sept. 2024
CVE-2024-7885	Undertow: improper state management in proxy protocol parsing causes information leakage	7.5 Élevée	21 août 2024

Autres produits Red Hat