ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (1.34.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (1.34.0) +618 more potentially affected by CVE-2026-87743 via io.quarkus:quarkus-vertx-http (>=3.33.2.1, <=3.33.3.2)

io.quarkus:quarkus-vertx-http MAVEN version =3.33.2.1, =0.6.5, =0.6.5, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.13.1 and more Source cves: CVE-2026-87743 S...

io.quarkus:quarkus-amazon-lambda-http (2.1.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (2.1.0.cr1) +105 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.1.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.1.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.apicurio:apicurio-registry-app (1.0.2.final), io.apicurio:apicurio-registry-storage-infinispan (1.0.2.final) +83 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (0.26.1)

io.quarkus:quarkus-vertx-http MAVEN version 0.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.apicurio:apicurio-registry-app 1.0.2.final - io.apicurio:apicurio-registry-storage-infinispan...

com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha2), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (1.5.0-alpha2) +226 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (1.4.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base 1.5.0-alpha2 -...

io.quarkiverse.amazonalexa:quarkus-amazon-alexa-integration-tests (1.0.2), io.quarkiverse.config:quarkus-config-extensions-integration-test-consul (1.0.2) +103 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.7.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.amazonalexa:quarkus-amazon-alexa-integration-tests 1.0.2 -...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +1253 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (>=3.21.0.cr1, <=3.27.4)

io.quarkus:quarkus-vertx-http MAVEN version =3.21.0.cr1, =0.1.0, =0.1.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.8 and more Source cves: CVE-2026-50559 Source advisory: MEND:CVE-2026-50559...

io.automatiko.addons:automatiko-cassandra-persistence-addon (0.21.0), io.automatiko.addons:automatiko-events-websocket-addon (0.21.0) +165 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.15.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.15.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.automatiko.addons:automatiko-cassandra-persistence-addon 0.21.0 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.20.1), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.20.1) +1794 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.0.0.alpha1, <=3.20.6)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.0.1, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.2, =0.0.1, =0.0.5 and more Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420254...

io.quarkus:quarkus-mailer (1.3.3.final), io.quarkus:quarkus-mailer-deployment (1.3.3.final) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.3.final)

io.quarkus:quarkus-vertx MAVEN version 1.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.3.final - io.quarkus:quarkus-mailer-deployment 1.3.3.final -...

io.quarkus:quarkus-keycloak-authorization (1.0.0.cr2), io.quarkus:quarkus-keycloak-authorization-deployment (1.0.0.cr2) +21 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.0.0.cr2)

io.quarkus:quarkus-vertx MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.0.0.cr2 - io.quarkus:quarkus-keycloak-authorization-deployment...

io.quarkus:quarkus-amazon-lambda-http (2.16.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (2.16.0.cr1) +218 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.16.0.cr1)

io.quarkus:quarkus-vertx MAVEN version 2.16.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.16.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deployment...

io.quarkus:quarkus-grpc (1.6.1.final), io.quarkus:quarkus-grpc-deployment (1.6.1.final) +23 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.6.1.final)

io.quarkus:quarkus-vertx MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-grpc 1.6.1.final - io.quarkus:quarkus-grpc-deployment 1.6.1.final -...

es.iti.wakamiti:wakamiti-server-quarkus (>=2.0.0-alpha, <=2.2.1), io.quarkus:quarkus-grpc (1.11.3.final) +37 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.11.3.final)

io.quarkus:quarkus-vertx MAVEN version 1.11.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - es.iti.wakamiti:wakamiti-server-quarkus =2.0.0-alpha, =2.2.1 - io.quarkus:quarkus-grpc 1.11.3.final -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.8.0.cr1), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.8.0.cr1) +17 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.8.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.8.0.cr1 -...

Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

io.quarkus:quarkus-jaxrs-client-reactive (2.5.0.final), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.5.0.final) +35 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.5.0.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.5.0.final -...

io.quarkus:quarkus-jaxrs-client-reactive (2.7.1.final), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.7.1.final) +43 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.7.1.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.7.1.final -...

io.quarkus:quarkus-agroal (0.13.0), io.quarkus:quarkus-agroal-deployment (0.13.0) +100 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (0.13.0)

io.quarkus:quarkus-core MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - io.quarkus:quarkus-agroal 0.13.0 - io.quarkus:quarkus-agroal-deployment 0.13.0 - io.quarkus:quarkus-amazon-lambd...

io.quarkus:quarkus-azure-functions-http (0.23.2), io.quarkus:quarkus-azure-functions-http-deployment (0.23.2) +49 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.23.2)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.2 - io.quarkus:quarkus-azure-functions-http-deployment...

io.quarkus.resteasy.reactive:resteasy-reactive (1.11.6.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (1.11.6.final) +18 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (1.11.6.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...