Red Hat build of Quarkus vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RH

Product

Red Hat build of Quarkus

by Red Hat · last CVE Sep 18, 2026

11

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 6Medium 4Low 0

Severity

All severities11 Critical1 High6 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Red Hat build of Quarkus to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-93432	6.1	1%	Sep 18	Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus Affected: All versions, or not specified
CVE-2026-10832	5.9	1%	Sep 18	Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload Affected: All versions, or not specified
CVE-2026-81829	5.3	1%	Sep 17	Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver Affected: All versions, or not specified
CVE-2023-6393	5.3	1%	Dec 6	Quarkus: potential invalid reuse of context when @cacheresult on a uni is used Affected: All versions, or not specified