Known Vulnerabilities for Quarkus by Quarkusio
Listed below are 10 of the newest known vulnerabilities associated with "Quarkus" by "Quarkusio".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108748 json | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_ch... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-94451 json | Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where c... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-94449 json | A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and cir... | Not Provided | 2026-09-21 | 2026-09-25 |
| CVE-2026-93432 json | A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to p... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-88789 json | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache C... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-87744 json | A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security control... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-87743 json | A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized ... | Not Provided | 2026-09-18 | 2026-10-09 |
| CVE-2026-87742 json | A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) b... | Not Provided | 2026-09-17 | 2026-10-09 |
| CVE-2026-77874 json | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A re... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-68494 json | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass i... | Not Provided | 2026-08-04 | 2026-08-05 |