Security Bulletin: IBM Datapower Operations Dashboard could be vulnerable to an out-of-memory (OOM) issue CVE-2025-2240

Summary Smallrye is used by the IBM Datapower Operations Dashboard for repository hosting including build, CI, and release publishing setup Vulnerability Details CVEID:CVE-2025-2240 DESCRIPTION: A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM...

CVE-2025-2240 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly...

CVE-2025-2240 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly...

CVE-2025-2240

creationtimestamp| type| source ---|---|--- 2025-03-12 17:01:11+00:00| seen| Telegram/MveSXve5Hx1iuO32dm7mrnWq9NYxtXsFLG2c04SagyG1F4 2025-03-19 07:49:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8033 2025-03-28 11:28:34+00:00| published-proof-of-concept|...

com.qwlabs.doraemon:task-queue (>=0.3.50, <=0.3.54), io.automatiko.addons:automatiko-fault-tolerance-addon (0.41.0) +12 more potentially affected by CVE-2025-2240 via io.smallrye:smallrye-fault-tolerance-apiimpl (6.8.0)

io.smallrye:smallrye-fault-tolerance-apiimpl MAVEN version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.smallrye:smallrye-fault-tolerance-apiimpl and may be impacted: - com.qwlabs.doraemon:task-queue =0.3.50, =3.19.0.cr1, =3.19.0.cr1,...

com.qwlabs.doraemon:task-queue (>=0.3.38, <=0.3.54), hu.icellmobilsoft.reactive.messaging.redisstream:quarkus-reactive-messaging-redisstream-extension-sample (>=1.0.4, <=1.4.0) +35 more potentially affected by CVE-2025-2240 via io.smallrye:smallrye-fault-tolerance-core (>=6.5.0, <=6.8.0)

io.smallrye:smallrye-fault-tolerance-core MAVEN version =6.5.0, =0.3.38, =1.0.4, =0.38.0, =3.16.0.cr1, =3.20.0.cr1 and more Source cves: CVE-2025-2240 Source advisory: OSV:GHSA-GFH6-3PQW-X2J4https://vulners...

com.qwlabs.doraemon:task-queue (>=0.3.0, <=0.3.37), io.apicurio:apicurio-registry-app (>=3.0.4, <=3.0.6) +95 more potentially affected by CVE-2025-2240 via io.smallrye:smallrye-fault-tolerance-core (>=6.3.0, <=6.4.1)

io.smallrye:smallrye-fault-tolerance-core MAVEN version =6.3.0, =0.3.0, =3.0.4, =3.0.4, =3.0.4, =3.0.4, =0.34.0, =4.0.2, =4.0.2, =4.0.2, =3.10.0.cr1, =3.10.0.cr1, =6.3.0, =6.3.0, =6.3.0, =6.3.0, =6.4.1 and more Source cves: CVE-2025-2240 Source advisory:...