QU
Product
Quarkus
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 21Medium 19Low 2
Watch
Add Quarkus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6267 | 9.8 | Jan 25 | A flaw was found in the json payload Affected: before 2.13.9; 3.0.0 before 3.2.9; 2.13.9; 3.2.9 |
| CVE-2022-4116 | 9.8 | Nov 22 | A vulnerability was found in quarkus Affected: before 2.13.5; 2.14.0 before 2.14.2 |
| CVE-2022-2466 | 9.8 | Aug 31 | It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior Affected: 2.10.0 before 2.10.4 |
| CVE-2022-21724 | 9.8 | Feb 2 | pgjdbc is the offical PostgreSQL JDBC Driver Affected: before 2.7.2 |
| CVE-2024-12225 | 9.1 | May 6 | A vulnerability was found in Quarkus in the quarkus-security-webauthn module Affected: before 3.15.3.1 |
| CVE-2023-6394 | 9.1 | Dec 9 | Quarkus: graphql operations over websockets bypass Affected: before 3.6.0 |
| CVE-2021-26291 | 9.1 | Apr 23 | Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a… Affected: before 1.13.5 |
Showing 7