RH
Product
Red Hat build of Quarkus 3.2.9.Final
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Red Hat build of Quarkus 3.2.9.Final to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6267 | 9.8 | Jan 25 | Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations. Affected: All versions, or not specified |
| CVE-2023-6394 | 9.1 | Dec 9 | Quarkus: graphql operations over websockets bypass Affected: All versions, or not specified |
| CVE-2023-5675 | 6.5 | Apr 25 | Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. Affected: All versions, or not specified |
Showing 3