io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.10.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.10.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.8.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.8.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.6.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.6.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.github.onecx.quarkus:onecx-permissions (>=0.5.0, <=0.7.0), io.github.onecx.quarkus:onecx-permissions-client (>=0.5.0, <=0.7.0) +76 more potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (>=2.0.0, <=2.15.0-lts)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version =2.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.0.1, =0.0.1, =2.0.0, =2.2.13, =2.7.0, =10.0.0, =10.0.0, =10.0.0, =10.2.0 and more Source cves: CVE-2026-40180http...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.15) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.15)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.14) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.14)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.12) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.12)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.7) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.7)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.3) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.3)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.11) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.11)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.10) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.10)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.2.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.2.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.4.0), io.quarkiverse.openapi.generator:quarkus-openapi-generator-generation-input (0.4.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.4.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (0.1.0) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (0.1.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.8), org.kie.kogito:integration-tests-data-index-service-quarkus-devservice (1.43.0.final) +20 more potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.8)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.3.6) potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.6)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

PT-2026-32035

Name of the Vulnerable Software and Affected Versions Quarkus OpenAPI Generator versions prior to 2.16.0 and 2.15.0-lts Description The unzip method in ApicurioCodegenWrapper.java does not validate that the file path of extracted ZIP entries remains within the intended output directory. The...

com.github.mcollovati:quarkus-hilla (>=1.0.0, <=1.0.1), io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.3.10) +381 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.16.10.final)

io.quarkus:quarkus-vertx MAVEN version 2.16.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - com.github.mcollovati:quarkus-hilla =1.0.0, =1.0.1 -...