Known Vulnerabilities for Quarkus by Quarkus
Listed below are 10 of the newest known vulnerabilities associated with "Quarkus" by "Quarkus".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-0481 | In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which ... | Not Provided | 2023-02-24 | 2023-02-24 |
| CVE-2023-0044 | If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated whic... | Not Provided | 2023-02-23 | 2023-02-23 |
| CVE-2022-21724 | pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doin... | 9.8 - CRITICAL | 2022-02-02 | 2022-11-09 |
| CVE-2022-21363 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected ... | 6.6 - MEDIUM | 2022-01-19 | 2022-05-27 |
| CVE-2022-4147 | Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with... | 6.6 - MEDIUM | 2022-12-06 | 2023-02-12 |
| CVE-2022-4116 | A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by loca... | 6.6 - MEDIUM | 2022-11-22 | 2023-02-12 |
| CVE-2021-26291 | Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising... | 9.1 - CRITICAL | 2021-04-23 | 2022-07-25 |
| CVE-2021-21409 | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high p... | 5.9 - MEDIUM | 2021-03-30 | 2022-05-12 |
| CVE-2021-21295 | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high p... | 5.9 - MEDIUM | 2021-03-09 | 2022-05-12 |
| CVE-2021-21290 | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high p... | 5.5 - MEDIUM | 2021-02-08 | 2022-05-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Quarkus | Quarkus | 1.9.2 | All | All | All |
| Application | Quarkus | Quarkus | 1.9.1 | All | All | All |
| Application | Quarkus | Quarkus | 1.9.0 | - | All | All |
| Application | Quarkus | Quarkus | 1.9.0 | candidate_release1 | All | All |
| Application | Quarkus | Quarkus | 1.9.0 | cr1 | All | All |
| Application | Quarkus | Quarkus | 1.8.3 | All | All | All |
| Application | Quarkus | Quarkus | 1.8.2 | All | All | All |
| Application | Quarkus | Quarkus | 1.8.1 | All | All | All |
| Application | Quarkus | Quarkus | 1.8.0 | - | All | All |
| Application | Quarkus | Quarkus | 1.8.0 | candidate_release1 | All | All |
| Application | Quarkus | Quarkus | 1.8.0 | cr1 | All | All |
| Application | Quarkus | Quarkus | 1.7.6 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.5 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.4 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.3 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.2 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.1 | All | All | All |
| Application | Quarkus | Quarkus | 1.7.0 | - | All | All |
| Application | Quarkus | Quarkus | 1.7.0 | candidate_release1 | All | All |
| Application | Quarkus | Quarkus | 1.7.0 | candidate_release2 | All | All |
Popular searches for Quarkus
Quarkus - Start coding with code.quarkus.io
code.quarkus.ioQuarkus - Start coding with code.quarkus.io Group Artifact Build Tool Version Example code Configure more options Extensions. Info alert:This page will help you bootstrap your Quarkus Extensions configure, boot and integrate a framework or technology into your Quarkus W U S application. The flag means the extension helps you get started with example code.
quarkus.io/extensions Application software Plug-in (computing) Representational state transfer Source code Reactive programming Client (computing) Amazon Web Services Software framework Booting Computer programming Hibernate (framework) JSON Database Java Database Connectivity Configure script Add-on (Mozilla) Hypertext Transfer Protocol Technology Browser extension Serialization
Quarkus - Supersonic Subatomic Java
quarkus.ioQuarkus - Supersonic Subatomic Java Quarkus : Supersonic Subatomic Java
Java (programming language) Application software Library (computing) Imperative programming HotSpot GraalVM Kubernetes Booting Reactive programming GitHub OpenJDK Computing platform RSS Source code Instant-on Memory management Scalability Compile time Computer memory Collection (abstract data type)