io.quarkus:quarkus-elytron-security-deployment (0.15.0), io.quarkus:quarkus-keycloak-deployment (0.15.0) +14 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.15.0)

io.quarkus:quarkus-resteasy MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.15.0 - io.quarkus:quarkus-keycloak-deployment 0.15.0 -...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application (>=1.1.0-rc1, <=1.1.0-rc2), com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-main (>=1.1.0-rc1, <=1.1.0-rc2) +316 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.0.cr3)

io.quarkus:quarkus-resteasy MAVEN version 2.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application =1.1.0-rc1, =1.1.0-rc1,...

io.quarkus:quarkus-kogito (0.28.1), io.quarkus:quarkus-kogito-deployment (0.28.1) +11 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.28.1)

io.quarkus:quarkus-resteasy MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-kogito 0.28.1 - io.quarkus:quarkus-kogito-deployment 0.28.1 -...

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.16.0, <=1.19.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.16.0, <=1.19.0) +279 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.16.0.cr1, <=3.19.0)

io.quarkus:quarkus-resteasy MAVEN version =3.16.0.cr1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.35.9, =2.5.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.16.0, =3.17.1 and more Source cves: CVE-2025-1634https://vulners.com/cve/...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.10.0, <=1.15.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.10.0, <=1.15.0) +494 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.9.0.cr1, <=3.15.3)

io.quarkus:quarkus-resteasy MAVEN version =3.9.0.cr1, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =2.4.0, =1.4.0, =1.4.0, =3.0.4, =2.6.6.final, =3.0.4, =3.0.4, =3.0.6 and more Source cves: CVE-2025-1634 Source advisory: MEND:CVE-2025-1634...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=1.9.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=1.9.0) +1437 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=0.11.0, <=3.8.6)

io.quarkus:quarkus-resteasy MAVEN version =0.11.0, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.1.5, =0.1.5, =1.0.0-alpha1, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.16 and more Source cves: CVE-2025...

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

CVE-2025-1634

CVE-2025-1634 affects the quarkus-resteasy extension; memory leaks occur when client requests have low timeouts, where a buffer is not released on timeout, causing increased memory usage and potentially OutOfMemoryError. Public details in IBM bulletins confirm the issue and provide remediation gu...

CVE-2025-1634: Missing Release of Memory after Effective Lifetime

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

PT-2025-8737

Name of the Vulnerable Software and Affected Versions quarkus-resteasy extension affected versions not specified Description A flaw in the quarkus-resteasy extension causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.16.0, <=1.19.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.16.0, <=1.19.0) +331 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.15.4, <=3.19.0)

io.quarkus:quarkus-resteasy MAVEN version =3.15.4, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.13.0-rc6, =1.13.0-rc6, =1.13.0-rc6, =1.35.9, =2.5.0, =3.0.7, =3.0.7, =3.0.7, =3.0.9 and more Source cves: CVE-2025-1634 Source advisory: SNYK:JAVA-IOQUARKUS-8...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.10.0, <=1.15.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.10.0, <=1.15.0) +494 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.9.0.cr1, <=3.15.3)

io.quarkus:quarkus-resteasy MAVEN version =3.9.0.cr1, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =2.4.0, =1.4.0, =1.4.0, =3.0.4, =2.6.6.final, =3.0.4, =3.0.4, =3.0.6 and more Source cves: CVE-2025-1634 Source advisory: SNYK:JAVA-IOQUARKUS-8746393...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.9.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.9.0) +717 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.0.0.alpha1, <=3.8.6)

io.quarkus:quarkus-resteasy MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.10.0-rc2, =1.12.1 - com.bo...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to the handling of HTTP requests with low timeouts which allows an unauthenticated attacker to repeatedly send specially crafted requests that trigger a memory leak. Remediation...