Read the docs
Red Hat Security Advisory

RHSA-2026:0131

Red Hat build of Quarkus 3.20.4.SP1 security update

Released 2026-01-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2025-11170 CVE-2025-12183 · GHSA-vqf4-7m7x-wgfc

org.lz4:lz4-java - Out-of-Bounds Memory Access

Priority MEDIUM 45

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00747 Published 2025-11-28 Partial fix · 1.8.1 CWE-125
TI-2025-10972 CVE-2025-11966 · GHSA-45p5-v273-3qqr

Cross-site scripting in Eclipse Foundation Vert.x

Priority MEDIUM 45

In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attribute…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-10-22 Partial fix · 4.5.22, 5.0.5 CWE-79