Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.22 for Quarkus 3.40 update is now available (RHBQ 3.40.1.GA)

An update for Red Hat Build of Apache Camel 4.22 for Quarkus 3.40 update is now available RHBQ 3.40.1.GA. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

CVE-2026-88789

CVE-2026-88789 — Camel Quarkus: forced Xalan TransformerFactory drops the JAXP external access restrictions Runnable proof-of-concept reproducer for the Apache Camel Quarkus vulnerability where the XSLT support extension camel-quarkus-support-xalan supplies its own Xalan-backed TransformerFactory...

CVE-2026-85315

CVE-2026-85315 — camel-grpc: consumer exception disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where, when a route behind a gRPC consumer failed, the route exception's message was copied into the gRPC Status description. Unlike the status cause withCause...,...

CVE-2022-2466---Request-Context-not-terminated-with-GraphQL

CVE-2022-2466 Request-Context-not-terminated-with-GraphQL How to run 1. run mvn:quarkus:dev 2. run the following http requests RUN THIS TWICE POST http://localhost:8080/graphql Content-Type: application/graphql Authorization: Bearer...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in MySQL client, Snappy Java, Apache CXF, Google Guava, LZ4-Java and Quarkus Vertx HTTP Vulnerability Details CVEID:CVE-2026-107912 DESCRIPTION: A flaw was found in the management interface of the Quarkus framework, specifical...

CVE-2026-108748

A flaw was found in Quarkus LangChain4j. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS through server memory exhaustion. By sending repeated WebSocket connection requests that reuse a single chat identifier, orphaned session data accumulates in memo...

CVE-2026-121837

A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property using the @SecureField annotation on its getter method rather than the field itself, the generated REST resource fails to enforce this constraint for filtering and sorting...

CVE-2026-121837

A flaw exists in the REST Data Panache component of Quarkus . When the @SecureField annotation is applied to a getter method instead of the field itself, the generated REST resource fails to enforce security constraints during filtering and sorting operations. Consequently, an authenticated user ...

EUVD-2026-117891

A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property using the @SecureField annotation on its getter method rather than the field itself, the generated REST resource fails to enforce this constraint for filtering and sorting...

CVE-2026-121837 Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort

A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property using the @SecureField annotation on its getter method rather than the field itself, the generated REST resource fails to enforce this constraint for filtering and sorting...

CVE-2026-121837

A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property using the @SecureField annotation on its getter method rather than the field itself, the generated REST resource fails to enforce this constraint for filtering and sorting...

CVE-2026-88789

A flaw was found in Apache Camel Quarkus. The XML transformation support extension configures a transformer that fails to enforce restrictions on external entities and stylesheets. A remote attacker can exploit this vulnerability by submitting a specially crafted XML document during transformatio...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.4.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

CVE-2026-107912

A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied...

CVE-2026-107912 Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw

A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied...

EUVD-2026-117440

A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied...

CVE-2026-107912 Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw

A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied...

CVE-2026-107912

A flaw exists in the management interface of the Quarkus framework , specifically within the quarkus-vertx-http component. The vulnerability is caused by a path concatenation flaw where the framework incorrectly combines the management root path with specific permission rules. This leads to secur...

CVE-2026-107912

A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied...

Quarkus-VertX-HTTP authorization issue vulnerability

The quarkus-vertx-http vulnerability involves authorization issues. It arises because the management interface incorrectly combines the management root path with specific permission rules, causing security policies to be applied to the wrong internal path. This may allow attackers to bypass...