Known vulnerabilities in Quarkus
Vendor:
Red Hat Inc.
Software:
Quarkus
Software CPE:
cpe:2.3:a:red_hat:quarkus:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
3.38.0
3.37.4
3.38.0-CR1
3.37.3
3.37.2
3.37.1
3.20.6.2
3.27.5
3.27.4.1
3.33.3
3.33.2.1
3.36.3
3.37.0
3.37.0-CR1
3.36.2
3.36.1
3.36.0
3.35.4
3.33.2
3.27.4
3.36.0-CR1
3.35.3
3.35.2
3.34.7
3.33.1.1
3.27.3.1
3.20.6.1
3.35.1
3.35.0
3.34.6
3.35.0-CR1
3.34.5
3.34.4
3.34.3
3.34.2
3.34.1
3.33.1
3.34.0
3.33.0
3.32.4
3.27.3
3.20.6
3.34.0-CR1
3.33.0-CR1
3.32.3
3.32.2
3.32.1
3.32.0
3.31.4
3.32.0-CR1
3.31.3
3.31.2
3.31.1
3.30.8
3.30.7
3.31.0-CR1
3.30.6
3.20.5
3.27.2
3.31.0
3.30.5
3.30.4
3.30.3
3.30.2
3.30.1
3.30.0
3.29.4
3.29.3
3.30.0-CR1
3.27.1
3.20.4
3.29.2
3.29.1
3.29.0
3.28.5
3.28.4
3.29.0-CR1
3.28.3
3.28.2
3.28.1
3.28.0
3.27.0
3.26.4
3.20.3
3.15.7
3.28.0-CR1
3.27.0-CR1
3.26.3
3.26.2
3.26.1
3.20.2.2
3.15.6.2
3.26.0
3.25.4
3.20.2.1
3.15.6.1
3.26.0-CR1
3.25.3
3.25.2
3.25.1
3.25.0
3.24.5
3.24.4
3.20.2
3.15.6
3.25.0-CR1
3.24.3
3.24.2
3.24.1
3.24.0
3.23.4
3.24.0-CR1
3.23.3
3.23.2
3.23.1
3.23.0
3.23.0-CR1
3.22.3
3.20.1
3.15.5
3.22.2
3.22.1
3.22.0
3.21.4
3.22.0-CR1
3.21.3
3.21.2
3.21.1
3.21.0
3.20.0
3.19.4
3.21.0-CR1
3.20.0-CR1
3.19.3
3.15.4
3.19.2
3.15.3.1
3.8.6.1
3.19.1
3.19.0
3.18.4
3.19.0-CR1
3.18.3
3.18.2
3.18.1
3.18.0
3.17.8
3.18.0-CR1
3.17.7
3.15.3
3.17.6
3.17.5
3.17.4
3.17.3
3.17.2
3.17.1
3.17.0
3.16.4
3.15.2
3.17.0-CR1
3.16.3
3.16.2
3.16.1
3.16.0
3.16.0-CR1
3.15.1
3.15.0
3.14.4
3.15.0-CR1
3.14.3
3.14.2
3.14.1
3.8.6
3.14.0
3.13.3
3.14.0-CR1
3.13.2
3.13.1
3.13.0
3.13.0-CR1
3.12.3
3.12.2
3.12.1
3.12.0
3.11.3
3.11.2
3.12.0-CR1
3.11.1
3.8.5
3.11.0
3.10.2
3.11.0-CR1
3.10.1
3.9.5
3.10.0
3.9.4
3.8.4
3.10.0-CR1
3.2.12
3.9.3
3.9.2
3.9.1
3.9.0
3.8.3
3.9.0-CR2
3.2.11
3.9.0-CR1
3.8.2
3.8.1
3.8.0
3.7.4
3.8.0-CR1
3.7.3
3.7.2
3.7.1
3.6.9
3.6.8
3.2.10
3.7.0
3.6.7
3.7.0-CR1
3.6.6
3.6.5
3.6.4
3.6.3
3.6.2
3.6.1
3.6.0
3.5.3
2.13.9
3.2.9
3.5.2
3.6.0-CR1
3.5.1
3.2.8
3.2.7
3.5.0
2.16.12
3.4.3
3.5.0-CR1
3.4.2
3.4.1
3.3.3
3.2.6
2.16.11
3.4.0
3.4.0-CR1
3.3.2
3.3.1
3.2.5
2.16.10
3.3.0
3.2.4
3.3.0-CR1
3.2.3
2.16.9
3.2.2
3.2.1
2.16.8
3.2.0
3.1.3
3.2.0-CR1
3.1.2
3.1.1
2.13.8
3.1.0
3.0.4
3.1.0-CR1
3.0.3
2.16.7
3.0.2
3.0.1
3.0.0
3.0.0-CR2
2.16.6
3.0.0-CR1
3.0.0-Beta1
2.16.5
3.0.0-Alpha6
3.0.0-Alpha5
2.16.4
2.16.3
3.0.0-Alpha4
2.16.2
2.16.1
2.7.7
3.0.0-Alpha3
2.13.7
2.16.0
2.16.0-CR1
2.15.3
2.15.2
2.15.1
2.13.6
2.15.0
3.0.0-Alpha2
2.14.3
2.15.0-CR1
2.14.2
2.13.5
2.14.1
2.13.4
2.14.0
2.14.0-CR1
3.0.0-Alpha1
2.13.3
2.13.2
2.13.1
2.13.0
2.12.3
2.13.0-CR1
2.12.2
2.12.1
2.12.0
2.11.3
2.12.0-CR1
2.11.2
2.11.1
2.10.4
2.11.0
2.10.3
2.11.0-CR1
2.10.2
2.10.1
2.10.0
2.10.0-CR1
2.7.6
2.9.2
2.9.1
2.9.0-CR1
2.9.0
2.8.3
2.8.2
2.8.1
2.8.0-CR1
2.8.0
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0-CR1
2.7.0
2.6.3
2.6.2
2.6.1
2.6.0-CR1
2.6.0
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0-CR1
2.5.0
2.4.2
2.4.1
2.4.0-CR1
2.4.0
2.3.1
2.3.0-CR1
2.3.0
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0-CR1
2.2.0
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0-CR1
2.1.0
2.0.3
2.0.2
2.0.1
2.0.0-CR3
2.0.0-CR2
2.0.0-CR1
2.0.0-Alpha3
2.0.0-Alpha2
2.0.0-Alpha1
2.0.0
1.13.7
1.13.6
1.13.5
1.13.4
1.13.3
1.13.2
1.13.1
1.13.0-CR1
1.13.0
1.12.2
1.12.1
1.12.0-CR1
1.12.0
1.11.7
1.11.6
1.11.5
1.11.4
1.11.3
1.11.2
1.11.1
1.11.0-CR1
1.11.0-Beta2
1.11.0-Beta1
1.11.0
1.10.5
1.10.4
1.10.3
1.10.2
1.10.1
1.10.0-CR1
1.10.0
1.9.2
1.9.1
1.9.0-CR1
1.9.0
1.8.3
1.8.2
1.8.1
1.8.0-CR1
1.8.0
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0-CR2
1.7.0-CR1
1.7.0
1.6.1
1.6.0-CR1
1.6.0
1.5.2
1.5.1
1.5.0-CR1
1.5.0
1.4.2
1.4.1
1.4.0-CR1
1.4.0
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0-CR2
1.3.0-CR1
1.3.0-Alpha2
1.3.0-Alpha1
1.3.0
1.2.1
1.2.0-CR1
1.2.0
1.1.1
1.1.0-CR1
1.1.0
1.0.1
1.0.0-CR2
1.0.0-CR1
1.0.0
0.28.1
0.28.0
0.27.0
0.26.1
0.26.0
0.25.0
0.24.0
0.23.2
0.23.1
0.23.0
0.22.0
0.21.2
0.21.1
0.21.0
0.20.0
0.19.1
0.19.0
0.18.0
0.17.0
0.16.1
0.16.0
0.15.0
0.14.0
0.13.3
0.13.2
0.13.1
0.13.0
0.12.0
0.11.0
0.10.0
0.9.1
0.9.0
0.8.0
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
0.0.1
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134739 - Improper Resolution of Path Equivalence CVE-2026-50559 |
CWE-41 | Medium | 3.20.6.2, 3.27.4.1, 3.27.5, 3.33.2.1, 3.33.3, 3.36.3, 3.37.0 | 17.06.2026 |
SB2026061748 SB2026061772 SB2026062438 |
||
| #VU129871 - Improper Access Control CVE-2026-39852 |
CWE-284 | High | 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.34.7, 3.35.2 | 05.05.2026 |
SB2026050573 SB2026050719 SB2026052540 and 2 more |
||
| #VU121068 - Resource Management Errors CVE-2025-66560 |
CWE-399 | Medium | 3.20.5, 3.27.2, 3.31.0 | 07.01.2026 |
SB2026010775 SB2026021249 SB2026032411 |
||
| #VU113811 - Exposure of resource to wrong sphere CVE-2025-49574 |
CWE-668 | Low | 3.15.7, 3.20.3, 3.24.1 | 12.08.2025 |
SB2025081226 SB2025100107 SB2025100114 and 9 more |
||
| #VU89005 - Resource exhaustion CVE-2024-1726 |
CWE-400 | Medium | 3.9.0 | 25.04.2024 |
SB2024042553 SB2024042554 SB2024081544 |
||
| #VU88190 - Exposure of sensitive information to an unauthorized actor CVE-2024-1979 |
CWE-200 | Medium | 3.7.3 | 05.04.2024 |
SB2024040544 SB2024042554 |
||
| #VU83981 - Improper Access Control CVE-2023-6393 |
CWE-284 | Low | 2.13.9 | 07.12.2023 |
SB2023120729 SB2023120731 |
||
| #VU83886 - Cleartext Transmission of Sensitive Information CVE-2023-1584 |
CWE-319 | Low | 3.1.0-CR1 | 05.12.2023 |
SB2023120534 SB2023120535 |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 2.7.6 | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |