Infinispan: circular reference on marshalling leads to dos

Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

Quarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service

Quarkus: potential invalid reuse of context when @cacheresult on a uni is used

Codehaus-plexus: xml external entity (xxe) injection