Important: Red Hat Security Advisory: Red Hat build of Quarkus 2.13.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Important: Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update

An update is now available for Red Hat build of Quarkus Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java Framework

A critical security vulnerability has been disclosed in the Quarkus Java framework that could be potentially exploited to achieve remote code execution on affected systems. Tracked as CVE-2022-4116 CVSS score: 9.8, the shortcoming could be trivially abused by a malicious actor without any...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.final), io.quarkus:quarkus-azure-functions-http-deployment (1.3.0.final) +32 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.3.0.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.3.0.final -...

io.quarkus:quarkus-azure-functions-http-deployment (0.23.0), io.quarkus:quarkus-elytron-security-deployment (0.23.0) +18 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (0.23.0)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-azure-functions-http-deployment 0.23.0 -...

io.quarkus:quarkus-azure-functions-http-deployment (0.25.0), io.quarkus:quarkus-elytron-security-deployment (0.25.0) +21 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (0.25.0)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-azure-functions-http-deployment 0.25.0 -...

io.quarkus:quarkus-azure-functions-http-deployment (0.26.0), io.quarkus:quarkus-elytron-security-deployment (0.26.0) +21 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (0.26.0)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-azure-functions-http-deployment 0.26.0 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (0.28.1), io.quarkus:quarkus-azure-functions-http-deployment (0.28.1) +22 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (0.28.1)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 0.28.1 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.0.0.cr1), io.quarkus:quarkus-azure-functions-http-deployment (1.0.0.cr1) +27 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.0.0.cr1)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.0.0.cr1 -...

io.debezium:debezium-quarkus-outbox-deployment (>=1.1.0.alpha1, <=1.1.0.beta1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.1.1.final) +24 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.1.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.debezium:debezium-quarkus-outbox-deployment =1.1.0.alpha1, =1.1.0.beta...

io.debezium:debezium-quarkus-outbox-deployment (>=1.1.0.beta2, <=1.2.0.alpha1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.2.0.final) +29 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.2.0.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.debezium:debezium-quarkus-outbox-deployment =1.1.0.beta2, =1.2.0.alpha...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.2.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.2.1.final) +23 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.2.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.2.1.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.3.1.final) +26 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.3.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.3.1.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.4.0.cr1), io.quarkus:quarkus-azure-functions-http-deployment (1.4.0.cr1) +28 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.4.0.cr1)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.4.0.cr1 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.cr1), io.quarkus:quarkus-azure-functions-http-deployment (1.7.0.cr1) +32 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.7.0.cr1)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.7.0.cr1 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.final), io.quarkus:quarkus-azure-functions-http-deployment (1.7.0.final) +43 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.7.0.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.7.0.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final), io.quarkus:quarkus-azure-functions-http-deployment (1.7.3.final) +32 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.7.3.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.7.3.final -...

com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (1.0.0), io.github.marcelorubim:quarkus-monitor-deployment (>=0.0.7, <=0.0.8) +54 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.8.0.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-client-deployment 1.0.0 -...

io.github.marcelorubim:quarkus-monitor-deployment (0.1.3), io.quarkus:quarkus-amazon-lambda-http-deployment (1.8.3.final) +35 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.8.3.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.github.marcelorubim:quarkus-monitor-deployment 0.1.3 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.9.0.cr1), io.quarkus:quarkus-azure-functions-http-deployment (1.9.0.cr1) +34 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.9.0.cr1)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.9.0.cr1 -...