ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +1093 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.28.0, <=3.33.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.28.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.0.2, =0.0.18 and more Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420254...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +995 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.30.0, <=3.33.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.30.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.0.6, =0.1.10, =0.1.3, =0.1.3, =0.1.3, =0.1.5 - ai.pipestream:pipestream-engine 0.0.6 and more...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +995 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.30.0, <=3.33.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.30.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.0.6, =0.1.10, =0.1.3, =0.1.3, =0.1.3, =0.1.5 - ai.pipestream:pipestream-engine 0.0.6 and more...

io.quarkiverse.amazonservices:quarkus-amazon-services-integration-tests (>=3.17.0.cr1, <=3.18.0), io.quarkiverse.asyncapi:quarkus-asyncapi-scanner (1.0.6) +443 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.35.0.cr1, <=3.35.0)

io.quarkus:quarkus-vertx-http MAVEN version =3.35.0.cr1, =3.17.0.cr1, =3.18.0 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner 1.0.6 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner-deployment 1.0.6 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner-tests-simple 1.0.6 -...

ai.pipestream:pipestream-server (>=0.7.23, <=0.7.24), ai.pipestream:pipestream-server-deployment (>=0.7.23, <=0.7.24) +630 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.34.0, <=3.35.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.34.0, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.24 - ai.timefold.solver.enterprise:timefold-solver-enterprise-quarkus-integration-test 2.0.0 -...

ai.pipestream:pipestream-server (>=0.7.23, <=0.7.24), ai.pipestream:pipestream-server-deployment (>=0.7.23, <=0.7.24) +630 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.34.0, <=3.35.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.34.0, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.24 - ai.timefold.solver.enterprise:timefold-solver-enterprise-quarkus-integration-test 2.0.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.4.0.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.4.0.final) +60 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.4.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.4.0.final -...

Improper Output Neutralization for Logs

Overview io.quarkus:quarkus-vertx-http is a Cloud Native, Linux Container First framework for writing Java applications. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in the HTTP access logs with long pattern when the logging format is set to a verbos...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.26.2), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.26.2) +1975 more potentially affected by CVE-2025-11537 via io.quarkus:quarkus-vertx-http (>=3.0.0.alpha1, <=3.27.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.0.6, =0.0.1, =0.0.6, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =0.0.5 and more Source cves: CVE-2025-11537 Source advisory: SNYK:JAVA-IOQUARKUS-15265250...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.27.0, <=1.28.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.27.0, <=1.28.0) +567 more potentially affected by CVE-2025-11537 via io.quarkus:quarkus-vertx-http (>=3.28.0.cr1, <=3.29.0)

io.quarkus:quarkus-vertx-http MAVEN version =3.28.0.cr1, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.28.0 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics 0.1.0-rc26 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics-deployment 0.1.0-rc26 -...

io.quarkus:quarkus-vertx-http-deployment (>=2.13.0.cr1, <=3.3.3) potentially affected by CVE-2025-47204 via org.webjars:bootstrap-multiselect (0.9.15)

org.webjars:bootstrap-multiselect MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap-multiselect and may be impacted: - io.quarkus:quarkus-vertx-http-deployment =2.13.0.cr1, =3.3.3 Source cves: CVE-2025-47204...

Important: Red Hat Security Advisory: Red Hat Integration Camel K 1.10.2 release security update

Red Hat Integration Camel K 1.10.2 release and security update is now available. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha2), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (1.5.0-alpha2) +226 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.4.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base 1.5.0-alpha2 -...

com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha3), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (1.5.0-alpha3) +77 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.4.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base 1.5.0-alpha3 -...

io.quarkus.extensions:quarkus-extension-catalog (>=1.0.0.alpha5, <=1.0.0.alpha12), io.quarkus:quarkus-amazon-lambda-http (1.5.0.cr1) +66 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.5.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus.extensions:quarkus-extension-catalog =1.0.0.alpha5, =1.0.0.alpha12 -...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.5.0-alpha4, <=1.5.0-alpha5), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.5.0-alpha4, <=1.5.0-alpha5) +249 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.5.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.5.0-alpha4, =1.5.0-alpha4, =1.5.0-alpha...

io.quarkus:quarkus-amazon-lambda-http (1.7.6.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.6.final) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.6.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.6.final -...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.6.0, <=1.6.4), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.6.0, <=1.6.4) +468 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.11.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.6.0, =1.6.0, =1.6.1, =1.6.0, =1.6.0,...

io.apicurio:apicurio-registry-common (1.3.2.final), io.quarkiverse.cxf:quarkus-cxf (0.1.0) +329 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.9.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.apicurio:apicurio-registry-common 1.3.2.final - io.quarkiverse.cxf:quarkus-cxf 0.1.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.9.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.9.1.final) +74 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.9.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.9.1.final -...