Quarkus: graphql operations over websockets bypass

Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

Undertow: cookie smuggling/spoofing

Quarkus-core: leak of local configuration properties into quarkus applications

Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

Quarkus: potential invalid reuse of context when @cacheresult on a uni is used