io.quarkiverse.cxf:quarkus-cxf (1.5.0.cr1), io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.0.cr1) +104 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.12.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 1.5.0.cr1 - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.0.cr1 -...

com.github.adminfaces:quarkus-omnifaces (1.4.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.4.0) +120 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (1.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.4.0 -...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.8, <=1.5.10) +454 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.15, <=1.5.17), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.15, <=1.5.17) +133 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.13.8.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15,...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.15, <=1.5.17), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.15, <=1.5.17) +133 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.13.8.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15,...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.8, <=1.5.10) +454 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

EUVD-2024-3074

Malicious code in bioql PyPI...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

io.quarkiverse.cxf:quarkus-cxf: Quarkus CXF may log user password and secret to application log

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP2)

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available RHBQ 3.8.6.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

Log Injection

io.quarkiverse.cxf, quarkus-cxf is vulnerable to Log Injection. The vulnerability is due to misconfiguration of logging settings, which results in passwords and other secrets being logged; specific configurations, such as enabled SOAP logging and access to application logs, allow attackers to...

CVE-2024-9621

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621 Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621

CVE-2024-9621 concerns Quarkus CXF/quarkus-cxf where passwords and other secrets can appear in application logs despite redaction. The issue requires specific configuration (e.g., SOAP logging enabled, client/app/endpoint logging properties) and attacker must access logs. CVSSv3.1 base score 5.3 ...

CVE-2024-9621 Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621 Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

CVE-2024-9621: Insertion of Sensitive Information into Log File

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

io.quarkiverse.cxf:quarkus-cxf (0.1.1), io.quarkiverse.cxf:quarkus-cxf-deployment (0.1.1) +60 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.10.0.final)

io.quarkus:quarkus-undertow MAVEN version 1.10.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 0.1.1 - io.quarkiverse.cxf:quarkus-cxf-deployment 0.1.1 -...