Known Vulnerabilities for Quarkus by Quarkusio
Listed below are 10 of the newest known vulnerabilities associated with "Quarkus" by "Quarkusio".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-68494 json | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass i... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-50559 json | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.... | Not Provided | 2026-06-19 | 2026-08-13 |
| CVE-2026-39852 json | Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1... | Not Provided | 2026-05-05 | 2026-08-17 |
| CVE-2026-16308 json | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote at... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2025-1247 json | A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field in... | Not Provided | 2025-02-13 | 2026-08-04 |
| CVE-2024-12397 json | A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming reque... | Not Provided | 2024-12-12 | 2026-08-04 |
| CVE-2024-10451 json | A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during t... | Not Provided | 2024-11-25 | 2026-08-04 |
| CVE-2024-9621 json | A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user... | Not Provided | 2024-10-08 | 2026-08-08 |
| CVE-2024-2700 json | A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namesp... | Not Provided | 2024-04-04 | 2026-08-04 |
| CVE-2024-1979 json | A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently... | Not Provided | 2024-03-13 | 2026-08-04 |