TI-2026-62974 CVE-2026-93432 · GHSA-6wxq-x76c-fqrf
Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus
Priority LOW 30
A flaw was found in the Quarkus Qute template engine.
Vulnerabilities
3 records
TI-2026-60356 CVE-2026-89058
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
Priority HIGH 66
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Crede…
TI-2026-60357 CVE-2026-89059
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
Priority HIGH 72
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count.