Vulnerabilities

TI-2026-14443 CVE-2026-17615 · GHSA-h82j-45qh-f65r

Resteasy-core: resteasy sourceprovider remote unauthenticated file read

MEDIUM 40

A flaw was found in RESTEasy's SourceProvider.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0085 Published 2026-08-31 Partial fix · 6.2.16.Final-redhat-00003, 26.6.7-3 +6 CWE-611

TI-2026-53641 CVE-2026-76763

MEDIUM 40

A flaw was found in SmallRye GraphQL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00793 Published 2026-08-31 Fixed in 2.14.2.redhat-00002, 2.17.0.redhat-00003 CWE-1284

TI-2026-10988 CVE-2026-12894 · GHSA-w5gv-wrvc-9hx8

MEDIUM 42

A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2026-08-31 Partial fix · 3.27.5.SP1, 3.33.3.SP1 +2 CWE-1336