TI-2022-06097 CVE-2022-21724 · GHSA-v7wg-cpwc-24m4
Unchecked Class Instantiation when providing Plugin Classes
Priority HIGH 76
pgjdbc is the offical PostgreSQL JDBC Driver.
RHSA-2022:4623
Red Hat build of Quarkus 2.7.5 release and security update
Released 2022-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 2.7.5
Fixes 9 records
TI-2021-05523 CVE-2021-22569 · GHSA-wrvw-hg22-4m67
Denial of Service of protobuf-java parsing procedure
Priority HIGH 72
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order.
Priority MEDIUM 41
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it.
TI-2022-00880 CVE-2022-0981 · GHSA-wr4r-g543-785x
Incorrect authorization in quarkus
Priority MEDIUM 40
A flaw was found in Quarkus.
Priority LOW 37
In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning.
TI-2022-05753 CVE-2022-21363 · GHSA-g76j-4cxx-23h9
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).
Priority LOW 34
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).
TI-2021-19603 CVE-2021-43797 · GHSA-wx5j-54mm-rqqq
HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
Priority LOW 34
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2021-02823 CVE-2021-3914 · GHSA-pvc3-wvxr-7cmf
Cross-site scripting in smallrye-health
Priority LOW 28
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs.
Priority LOW 25
In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle.