Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.1 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

CVE-2025-64518 vulnerabilities

Vulnerabilities for packages: dependency-track...

CVE-2025-64518 vulnerabilities

Vulnerabilities for packages: dependency-track...

CVE-2025-64518

creationtimestamp| type| source ---|---|--- 2025-11-11 00:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cw4oz4hb2k 2025-11-11 01:30:14+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cyfauyspb2...

CVE-2025-64518

CVE-2025-64518 affects CycloneDX core (Java). From 2.1.0 up to but excluding 11.0.1, the XML Validator in cyclonedx-core-java was insecurely configured, enabling XML External Entity (XXE) injection. The issue is tied to incomplete mitigation that fixed parsing but not validation (GHSA-683x-4444-j...