QU
Product
quarkus
3
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add quarkus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39852 | 8.2 | May 5 | Quarkus authorization bypass via semicolon path normalization inconsistency Affected: < 3.20.6.1; >= 3.27.3.0, < 3.27.3.1; >= 3.34.0, < 3.34.7; >= 3.35.0, < 3.35.2 |
| CVE-2026-50559 | 7.5 | Jun 19 | Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities Affected: >= 3.36.0, < 3.36.3; >= 3.33.0, < 3.33.2.1; >= 3.27.0, < 3.27.4.1; < 3.20.6.2 |
| CVE-2025-66560 | 7.5 | Jan 7 | Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write Affected: >= 3.30.0, < 3.31.0; >= 3.21.0, < 3.27.2; < 3.20.5 |
Showing 3