Red Hat Security AdvisoryRHSA-2025:1884
Red Hat build of Quarkus 3.8.6.SP3 Security Update
Released 2025-02-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 3.8.6.SP3
Fixes 3 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority MEDIUM 41
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00992 · Published 2025-02-26 · Partial fix · 3.8.6, 3.15.3 +3 CWE-401
Priority MEDIUM 40
A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00819 · Published 2025-02-13 · Fixed in 3.18.2, 3.15.3.1 +1 CWE-488
