Browse CVEs

HIGH 7.5 CVE-2026-50559 Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, and 3.20.6.… Quarkus 3.20.6.2 / 3.27.4.1+ Fix from $1,9502026-06-19 HIGH 8.2 CVE-2026-39852 Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, … Quarkus 3.20.6.1 / 3.27.3.1+ Fix from $1,9502026-05-05 HIGH 7.5 CVE-2025-66560 Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a vulnerabi… Quarkus 3.20.5 / 3.27.2+ Fix from $1,9502026-01-07 CRITICAL 9.1 CVE-2024-12225 A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for regist… Quarkus 3.15.3.1+ Fix from $2,3002025-05-06 CRITICAL 9.8 CVE-2023-6267 A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is … Quarkus 2.13.9 / 3.2.9+ Fix from $2,3002024-01-25 HIGH 7.5 CVE-2023-5720 A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information… Quarkus 3.2.8+ Fix from $1,9502023-11-15 HIGH 7.5 CVE-2023-1584 A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, w… Quarkus 2.13.8+ Fix from $1,9502023-10-04 HIGH 7.5 CVE-2022-4147 Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest are the … Quarkus 2.13.5 / 2.14.2+ Fix from $1,9502022-12-06 CRITICAL 9.8 CVE-2022-2466 It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior. Quarkus 2.10.4+ Fix from $2,3002022-08-31 HIGH 8.8 CVE-2022-0981 A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This fla… Quarkus 2.7.1+ Fix from $1,9502022-03-23