What’s Vulnerable › Products
Red Hat build of Quarkus vulnerabilities
29 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Red Hat build of Quarkus version is affected
Exploited Red Hat build of Quarkus vulnerabilities
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
Latest Red Hat build of Quarkus vulnerabilities
- CVE-2026-93432 — Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus (CVSS 6.1)
- CVE-2026-10832 — Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload (CVSS 5.9)
- CVE-2026-81829 — Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver (CVSS 5.3)
- CVE-2025-1634 — Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout (CVSS 7.5)
- CVE-2024-1726 — Quarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service (CVSS 5.3)
- CVE-2024-2700 — Quarkus-core: leak of local configuration properties into quarkus applications (CVSS 7.0)
- CVE-2024-1300 — Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support (CVSS 5.4)
- CVE-2024-1979 — Quarkus: information leak in annotation (CVSS 3.5)
- CVE-2023-6394 — Quarkus: graphql operations over websockets bypass (CVSS 9.1)
- CVE-2023-6393 — Quarkus: potential invalid reuse of context when @cacheresult on a uni is used (CVSS 5.3)
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
- CVE-2023-4853 — Quarkus: http security policy bypass (CVSS 8.1)
- CVE-2023-1108 — Undertow: infinite loop in sslconduit during close (CVSS 7.5)
- CVE-2023-2974 — Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol (CVSS 8.1)
- CVE-2023-1664 — (CVSS 6.5)
- CVE-2023-0044 — (CVSS 6.1)
- CVE-2022-4492 — (CVSS 7.5)
- CVE-2022-4116 — (CVSS 9.8)
- CVE-2022-1259 — (CVSS 7.5)
- CVE-2021-3669 — (CVSS 5.5)
- CVE-2021-3914 — (CVSS 6.1)
- CVE-2021-4178 — (CVSS 6.7)
- CVE-2022-1011 — (CVSS 7.8)
- CVE-2021-3744 — (CVSS 5.5)
- CVE-2021-3609 — (CVSS 7.0)