Vulnerabilities

Quarkus is a Java framework for building cloud-native applications.

Quarkus is a Java framework for building cloud-native applications.

Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications.

A vulnerability was found in Quarkus in the quarkus-security-webauthn module.

A flaw was found in the json payload.

A flaw was found in Quarkus.

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain.

A flaw was found in Quarkus.

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure.

Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed.

A vulnerability was found in quarkus.

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

A flaw was found in Quarkus.

pgjdbc is the offical PostgreSQL JDBC Driver.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful.

jsoup is a Java library for working with HTML.