Read the docs

quarkiverse

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

quarkiverse records in CISA KEV

No quarkiverse vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority HIGH 70

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00366 Published 2026-10-11 No fix listed CWE-401
Open these records in search →