io.camelbee:camelbee-quarkus-core (3.2.1), io.camelbee:camelbee-quarkus-security (3.2.1) +11 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-soap (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-soap MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879245...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization when handling HTTP request paths that have had normalizedPath applied. An attacker can gain unauthorized access to protected resources by appending a semicolon and arbitrary text to the request URL, exploiting...

EUVD-2024-54455

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.15.6 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

io.quarkus:quarkus-security-webauthn-deployment (>=2.13.8.final, <=3.18.0.cr1), io.quarkus:quarkus-test-security-webauthn (>=2.13.8.final, <=3.18.0.cr1) potentially affected by CVE-2024-12225 via io.quarkus:quarkus-security-webauthn (>=2.13.8.final, <=3.18.0.cr1)

io.quarkus:quarkus-security-webauthn MAVEN version =2.13.8.final, =2.13.8.final, =2.13.8.final, =3.18.0.cr1 Source cves: CVE-2024-12225 Source advisory: MEND:CVE-2024-12225...

CVE-2024-12225

A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default...

CVE-2024-12225

CVE-2024-12225 affects Quarkus, specifically the quarkus-security-webauthn module. The vulnerability arises because default REST endpoints for user registration/login remain accessible when developers add custom endpoints, potentially allowing an attacker to obtain a login cookie with no correspo...

Quarkus security vulnerabilities

Quarkus is a cloud-native Linux container-first framework for writing Java applications from the Quarkus open source. A security vulnerability exists in Quarkus that stems from an undisabled default REST endpoint in the quarkus-security-webauthn module, which could lead to arbitrary user login...

CVE-2024-12225: Authentication Bypass Using an Alternate Path or Channel

A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default...

io.quarkus:quarkus-security-webauthn-deployment (>=3.0.0.alpha1, <=3.17.8), io.quarkus:quarkus-test-security-webauthn (>=3.0.0.alpha1, <=3.17.8) potentially affected by CVE-2024-12225 via io.quarkus:quarkus-security-webauthn (>=3.0.0.alpha1, <=3.17.8)

io.quarkus:quarkus-security-webauthn MAVEN version =3.0.0.alpha1, =3.0.0.alpha1, =3.0.0.alpha1, =3.17.8 Source cves: CVE-2024-12225 Source advisory: SNYK:JAVA-IOQUARKUS-9376953...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel through the default REST endpoints. An attacker can bypass authentication controls and potentially log in as an existing user without proper credentials by exploiting these...

Quarkus security vulnerabilities

Quarkus is a cloud-native Linux container-first framework for writing Java applications open-sourced by Quarkus. A security vulnerability exists in Quarkus that stems from a request parameter being leaked between concurrent requests if the endpoint is injected using a field that does not have a C...

Quarkus security vulnerabilities

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus quarkus-vertx-http, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...