Red Hat build of Apicurio Registry 2 vulnerabilities

Product

Red Hat build of Apicurio Registry 2

by Red Hat · last CVE May 13, 2026

CVEs

On KEV

10.0

Max CVSS

New 30D

Severity mix

Critical 9High 21Medium 7Low 1

Severity

Exploitation

Watch

Add Red Hat build of Apicurio Registry 2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-42041	6.5	1%	Apr 24	Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified
CVE-2023-5675	6.5	0%	Apr 25	Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. Affected: All versions, or not specified
CVE-2025-7195	6.4	0%	Aug 7	Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd Affected: All versions, or not specified
CVE-2026-22029	6.1	1%	Jan 10	React Router vulnerable to XSS via Open Redirects Affected: All versions, or not specified
CVE-2023-6717	6.0	1%	Apr 25	Keycloak: xss via assertion consumer service url in saml post-binding flow Affected: All versions, or not specified
CVE-2024-11831	5.4	1%	Feb 10	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified