Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks

Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

Smallrye-fault-tolerance: smallrye fault tolerance

Undertow: improper state management in proxy protocol parsing causes information leakage

Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

Undertow: url-encoded request path information can be broken on ajp-listener

Xnio: stackoverflowexception when the chain of notifier states becomes problematically big

Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

Quarkus-core: leak of local configuration properties into quarkus applications

Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.

Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Undertow: learningpushhandler can lead to remote memory dos attacks