Red Hat Security Advisory

RHSA-2025:13010

Red Hat build of Quarkus 3.20.2 release and security update

Released 2025-08-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.20.2.redhat io.quarkus.quarkus-vertx-3.20.2.redhat-00003.jar, org.postgresql.postgresql-42.7.7.redhat-00001.jar

TI-2025-31226 CVE-2025-49146 · GHSA-hq9p-pm7w-8p54

MEDIUM 42

pgjdbc is an open source postgresql JDBC Driver.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00488 Published 2025-06-11 Partial fix · 42.7.7 CWE-287

TI-2025-31587 CVE-2025-49574 · GHSA-9623-mj7j-p9v4

LOW 30

Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications.

CVSS 3.1MEDIUM 6.4 Adjacent network Low privileges No interaction EPSS 0.00283 Published 2025-06-23 Partial fix · 3.24.1, 3.20.2 +1 CWE-668