io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.6.1.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.6.1.final) +22 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.6.1.final)

io.quarkus:quarkus-resteasy MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.6.1.final -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0.beta1), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0.beta1) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.0.cr2)

io.quarkus:quarkus-resteasy MAVEN version 2.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0.beta1 -...

com.trendyol:kediatr-quarkus-starter (1.0.0), io.javaoperatorsdk.admissioncontroller.sample:quarkus-sample (0.1.0) +17 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.5.4.final)

io.quarkus:quarkus-resteasy MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.trendyol:kediatr-quarkus-starter 1.0.0 -...

com.hazelcast:quarkus-hazelcast-client-integration-tests (3.0.0), eu.michael-simons.neo4j:neo4j-ogm-quarkus-integration-tests (1.0.0) +45 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.7.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.7.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.hazelcast:quarkus-hazelcast-client-integration-tests 3.0.0 -...

com.hazelcast:quarkus-hazelcast-client-integration-tests (1.1.0), com.pro-crafting.tools:jsonpretty-web (1.0.4) +29 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.8.1.final)

io.quarkus:quarkus-resteasy MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.hazelcast:quarkus-hazelcast-client-integration-tests 1.1.0 -...

io.quarkiverse.jgit:quarkus-jgit-integration-tests (2.2.0), io.quarkus:quarkus-resteasy-deployment (2.12.3.final) +18 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.12.3.final)

io.quarkus:quarkus-resteasy MAVEN version 2.12.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.jgit:quarkus-jgit-integration-tests 2.2.0 - io.quarkus:quarkus-resteasy-deployment...

io.quarkus:quarkus-kogito (1.2.0.cr1), io.quarkus:quarkus-kogito-deployment (1.2.0.cr1) +14 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.2.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-kogito 1.2.0.cr1 - io.quarkus:quarkus-kogito-deployment 1.2.0.cr1 -...

io.quarkus:quarkus-resteasy-deployment (2.15.0.cr1), io.quarkus:quarkus-resteasy-jackson (2.15.0.cr1) +15 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.15.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 2.15.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-resteasy-deployment 2.15.0.cr1 - io.quarkus:quarkus-resteasy-jackson 2.15.0.cr1 -...

io.quarkiverse.hibernatesearchextras:quarkus-integration-test-hibernate-search-orm-elasticsearch-aws (1.1.0.cr1), io.quarkus:quarkus-resteasy-deployment (2.11.0.cr1) +16 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.11.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 2.11.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.hibernatesearchextras:quarkus-integration-test-hibernate-search-orm-elasticsearch-aws...

io.quarkus:quarkus-kogito (1.0.0.cr2), io.quarkus:quarkus-kogito-deployment (1.0.0.cr2) +12 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.0.0.cr2)

io.quarkus:quarkus-resteasy MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-kogito 1.0.0.cr2 - io.quarkus:quarkus-kogito-deployment 1.0.0.cr2 -...

io.debezium:debezium-quarkus-outbox (>=1.4.0.beta1, <=1.4.0.cr1), io.debezium:debezium-quarkus-outbox-deployment (>=1.2.3.final, <=1.4.0.cr1) +130 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.7.1.final)

io.quarkus:quarkus-resteasy MAVEN version 1.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.debezium:debezium-quarkus-outbox =1.4.0.beta1, =1.2.3.final, =1.4.0.beta1, =1.2.3.final,...

GHSA-4FWR-MH5Q-HCHH io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

io.quarkus:quarkus-resteasy-deployment (2.13.0.cr1), io.quarkus:quarkus-resteasy-jackson (2.13.0.cr1) +15 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 2.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-resteasy-deployment 2.13.0.cr1 - io.quarkus:quarkus-resteasy-jackson 2.13.0.cr1 -...

com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application (1.0.1), com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-main (1.0.1) +29 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.12.2.final)

io.quarkus:quarkus-resteasy MAVEN version 1.12.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application 1.0.1 -...

com.github.t1:wunderbar.demo.product (2.1.4), com.radcortez.flyway:flyway-junit5-quarkus (1.3.0) +179 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.5.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.github.t1:wunderbar.demo.product 2.1.4 - com.radcortez.flyway:flyway-junit5-quarkus 1.3.0 -...

com.pro-crafting.tools:jsonpretty-web (1.0.1), io.quarkus:quarkus-elytron-security-deployment (0.22.0) +39 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.22.0)

io.quarkus:quarkus-resteasy MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.pro-crafting.tools:jsonpretty-web 1.0.1 - io.quarkus:quarkus-elytron-security-deployment 0.22.0 -...

com.github.database-rider:quarkus-postgres-sample (>=1.24.0, <=1.37.1), com.github.fmcejudo:quarkus-eureka (0.0.11) +139 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.3.final)

io.quarkus:quarkus-resteasy MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.github.database-rider:quarkus-postgres-sample =1.24.0, =1.37.1 -...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.3), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.3) +19 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.20.0)

io.quarkus:quarkus-resteasy MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.github.fmcejudo:quarkus-eureka =0.0.1, =0.0.1, =0.0.3 - io.quarkus:quarkus-elytron-security-deployme...

io.quarkus:quarkus-elytron-security-deployment (0.15.0), io.quarkus:quarkus-keycloak-deployment (0.15.0) +14 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.15.0)

io.quarkus:quarkus-resteasy MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.15.0 - io.quarkus:quarkus-keycloak-deployment 0.15.0 -...

io.quarkus:quarkus-kogito (1.0.0.final), io.quarkus:quarkus-kogito-deployment (1.0.0.final) +12 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.0.0.final)

io.quarkus:quarkus-resteasy MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-kogito 1.0.0.final - io.quarkus:quarkus-kogito-deployment 1.0.0.final -...