Known vulnerabilities in Red Hat build of Quarkus

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_quarkus:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Quarkus Red Hat build of Quarkus is affected by 66 known vulnerabilities: 12 high, 43 medium, 11 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134739 - Improper Resolution of Path Equivalence
CVE-2026-50559
CWE-41 Medium
No
No
3.20.6.SP2 17.06.2026 SB2026061748
SB2026061772
SB2026062438
and 1 more
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 17 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 13 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 15 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554
CWE-362 High
No
No
3.27.3.SP1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU129871 - Improper Access Control
CVE-2026-39852
CWE-284 High
No
No
3.20.6.SP1, 3.27.3.SP1 05.05.2026 SB2026050573
SB2026050719
SB2026052540
and 2 more
#VU128414 - Allocation of Resources Without Limits or Throttling
CVE-2026-42198
CWE-770 Medium
No
No
3.27.3.SP2 28.04.2026 SB20260428236
SB2026052067
SB2026052092
and 23 more
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566
CWE-200 Medium
No
No
3.20.4.SP1, 3.27.1.SP1 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183
CWE-125 Medium
No
No
3.20.4.SP1, 3.27.1.SP1 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU119089 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-64518
CWE-611 High
No
No
3.20.4 03.12.2025 SB2025120316
SB2025120355
SB2025120424
and 1 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966
CWE-79 Low
No
No
3.27.1.SP1 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU114761 - Resource exhaustion
CVE-2025-58057
CWE-400 Medium
No
No
3.15.7, 3.20.3 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056
CWE-444 Medium
No
No
3.15.7, 3.20.3 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
3.15.6.SP1, 3.20.2.SP1 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU106936 - Resource exhaustion
CVE-2025-1634
CWE-400 Medium
No
No
3.15.3.SP1 03.04.2025 SB2025040340
SB2025070345
SB2025070708
and 4 more
#VU106935 - Exposure of sensitive information to an unauthorized actor
CVE-2025-1247
CWE-200 Low
No
No
3.15.3.SP1 03.04.2025 SB2025040340
SB2025070708
#VU106927 - Resource exhaustion
CVE-2025-2240
CWE-400 Medium
No
No
3.15.4 03.04.2025 SB2025040318
SB2025040326
SB2025040327
and 6 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
3.15.3.SP1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU98523 - Improper Certificate Validation
CVE-2021-44549
CWE-295 Medium
No
No
3.2.12.SP1, 3.8.6.SP1 14.10.2024 SB2021122129
SB2024101593
SB2024101594
and 5 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094
CWE-770 Medium
Available
No
3.2.12.SP1, 3.8.6.SP1 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more


Showing elements 1 - 20 out of 66