IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

quarkusio Schwachstellen (CVE)

Für quarkusio veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

quarkus 4
4 Ergebnisse
7.5Hoch
CVE-2026-50559

Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

quarkusio quarkus; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat Red Hat build of Quarkus 3.20.6.SP2

Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, and 3.20.6.2, Quarkus HTTP path-based authorization policies can be bypassed using encoded semicolons (%3B) to smuggle ma…

1.0%EPSS
8.8Hoch
CVE-2026-39852

Quarkus authorization bypass via semicolon path normalization inconsistency

quarkusio quarkus; Red Hat Cryostat 4 on RHEL 9; Red Hat HawtIO HawtIO 4.4.0; Red Hat Red Hat Build of Apache Camel 4.14 for Quarkus 3.27

Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the security layer and the routing layer allows unauthenticated or …