Red Hat Security Advisory

RHSA-2025:22195

Red Hat build of Quarkus 3.20.4 release and security update

Released 2025-12-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.20.4.redhat org.cyclonedx.cyclonedx-core-java-11.0.1.redhat-00001.jar

TI-2025-39908 CVE-2025-64518 · GHSA-6fhj-vr9j-g45r

LOW 39

The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2025-11-10 Partial fix · 11.0.1 CWE-611