Security Bulletin: Vulnerabilities in quarkus-resteasy affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in quarkus-resteasy has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: ...

CVE-2025-1634 vulnerabilities

Vulnerabilities for packages: apicurio-registry...

CVE-2025-1634 vulnerabilities

Vulnerabilities for packages: apicurio-registry...

io.quarkiverse.loggingsentry:quarkus-logging-sentry-integration-tests (1.2.0), io.quarkus:quarkus-resteasy-deployment (2.10.1.final) +189 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.10.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.loggingsentry:quarkus-logging-sentry-integration-tests 1.2.0 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.9.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.9.0) +717 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.0.0.alpha1, <=3.8.6)

io.quarkus:quarkus-resteasy MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.10.0-rc2, =1.12.1 - com.bo...

io.quarkiverse.amazonalexa:quarkus-amazon-alexa-integration-tests (1.0.1), io.quarkiverse.amazonservices:quarkus-amazon-services-integration-tests (1.0.2) +497 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.6.0.final)

io.quarkus:quarkus-resteasy MAVEN version 2.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.amazonalexa:quarkus-amazon-alexa-integration-tests 1.0.1 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (>=1.9.0, <=1.9.2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (>=1.9.0, <=1.9.2) +24 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.6.final)

io.quarkus:quarkus-resteasy MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests =1.9.0, =1.9.0, =1.9.2 -...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.3), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.3) +19 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.20.0)

io.quarkus:quarkus-resteasy MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.github.fmcejudo:quarkus-eureka =0.0.1, =0.0.1, =0.0.3 - io.quarkus:quarkus-elytron-security-deployme...

com.tencent.bk.base.datahub:debezium-quarkus-outbox-deployment (1.5.4-bkbase.1), com.tencent.bk.base.datahub:debezium-server (1.5.4-bkbase.1) +287 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.12.0.final)

io.quarkus:quarkus-resteasy MAVEN version 1.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.tencent.bk.base.datahub:debezium-quarkus-outbox-deployment 1.5.4-bkbase.1 -...

com.dropchop.quarkus:snakejar-example (>=1.0.8, <=1.0.13), io.quarkiverse.artemis:quarkus-integration-test-artemis-core (1.1.0) +186 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.9.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.dropchop.quarkus:snakejar-example =1.0.8, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0) +486 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.4.0.final)

io.quarkus:quarkus-resteasy MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0 -...

io.backpackcloud:fakeomatic (>=0.5.0, <=0.9.1), io.github.microcks:microcks-async-minion (>=1.0.0-rc1, <=1.1.0) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.5.2.final)

io.quarkus:quarkus-resteasy MAVEN version 1.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.backpackcloud:fakeomatic =0.5.0, =1.0.0-rc1, =1.1.0 -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.13.0.cr1), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.13.0.cr1) +21 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.13.0.cr1 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.16.0, <=1.19.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.16.0, <=1.19.0) +279 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.16.0.cr1, <=3.19.0)

io.quarkus:quarkus-resteasy MAVEN version =3.16.0.cr1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.35.9, =2.5.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.17.1 and more Source cves: CVE-2025-1634https://vulners.com/cve/...

io.quarkus:quarkus-elytron-security-deployment (0.16.0), io.quarkus:quarkus-keycloak-deployment (0.16.0) +7 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.16.0)

io.quarkus:quarkus-resteasy MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.16.0 - io.quarkus:quarkus-keycloak-deployment 0.16.0 -...

com.pro-crafting.tools:jsonpretty-web (1.0.0), io.quarkus:quarkus-elytron-security-deployment (0.21.1) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.21.1)

io.quarkus:quarkus-resteasy MAVEN version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.pro-crafting.tools:jsonpretty-web 1.0.0 - io.quarkus:quarkus-elytron-security-deployment 0.21.1 -...

io.quarkus:quarkus-elytron-security-deployment (0.13.3), io.quarkus:quarkus-resteasy-deployment (0.13.3) +6 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.13.3)

io.quarkus:quarkus-resteasy MAVEN version 0.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.13.3 - io.quarkus:quarkus-resteasy-deployment 0.13.3 -...

com.github.fmcejudo:quarkus-eureka (0.0.4), com.github.fmcejudo:quarkus-eureka-deployment (0.0.4) +14 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.24.0)

io.quarkus:quarkus-resteasy MAVEN version 0.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.github.fmcejudo:quarkus-eureka 0.0.4 - com.github.fmcejudo:quarkus-eureka-deployment 0.0.4 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (0.8.40), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (0.8.40) +124 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.16.9.final)

io.quarkus:quarkus-resteasy MAVEN version 2.16.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test 0.8.40 -...

io.github.marcelorubim:quarkus-monitor (>=0.1.0, <=0.1.2), io.github.marcelorubim:quarkus-monitor-deployment (>=0.1.0, <=0.1.2) +24 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.8.2.final)

io.quarkus:quarkus-resteasy MAVEN version 1.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.github.marcelorubim:quarkus-monitor =0.1.0, =0.1.0, =0.1.2 -...