Known Vulnerabilities for Quarkus by Quarkusio
Listed below are 10 of the newest known vulnerabilities associated with "Quarkus" by "Quarkusio".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-68494 json | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass i... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-50559 json | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.... | Not Provided | 2026-06-19 | 2026-08-13 |
| CVE-2026-39852 json | Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1... | Not Provided | 2026-05-05 | 2026-08-17 |
| CVE-2026-19651 json | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authoriza... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-19625 json | When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that... | Not Provided | 2026-09-08 | 2026-09-10 |
| CVE-2026-16308 json | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote at... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2026-12894 json | A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails.... | Not Provided | 2026-08-31 | 2026-09-11 |
| CVE-2025-1247 json | A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field in... | Not Provided | 2025-02-13 | 2026-08-04 |
| CVE-2024-12397 json | A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming reque... | Not Provided | 2024-12-12 | 2026-08-04 |
| CVE-2024-10451 json | A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during t... | Not Provided | 2024-11-25 | 2026-08-31 |