RH
Product
Red Hat build of Quarkus 3.27.6.redhat
6
CVEs
0
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Red Hat build of Quarkus 3.27.6.redhat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87744 | 9.1 | Oct 12 | Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations Affected: All versions, or not specified |
| CVE-2026-94449 | 7.5 | Sep 21 | Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service Affected: All versions, or not specified |
| CVE-2026-89059 | 7.5 | Sep 18 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) Affected: All versions, or not specified |
| CVE-2026-89058 | 7.4 | Sep 18 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config Affected: All versions, or not specified |
| CVE-2026-94451 | 6.5 | Oct 12 | Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache Affected: All versions, or not specified |
| CVE-2026-93432 | 6.1 | Sep 18 | Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus Affected: All versions, or not specified |
Showing 6