io.quarkiverse.cxf:quarkus-cxf (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.8, <=1.5.10) +454 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

com.github.adminfaces:quarkus-omnifaces (1.4.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.4.0) +120 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (1.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.4.0 -...

io.quarkiverse.cxf:quarkus-cxf (1.5.0.cr1), io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.0.cr1) +104 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.12.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 1.5.0.cr1 - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.0.cr1 -...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.15, <=1.5.17), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.15, <=1.5.17) +133 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.13.8.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15,...

io.camelbee:camelbee-quarkus-core (3.2.1), io.camelbee:camelbee-quarkus-security (3.2.1) +11 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-soap (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-soap MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879245...

io.camelbee:camelbee-quarkus-core (3.2.1), io.camelbee:camelbee-quarkus-security (3.2.1) +11 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-soap (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-soap MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: OSV:GHSA-MRRP-9GJM-749V...

io.camelbee:camelbee-quarkus-core (>=2.0.5, <=3.1.2), io.camelbee:camelbee-quarkus-security (>=2.0.5, <=3.1.2) +16 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-transport (>=4.15.0, <=4.18.1)

org.apache.camel:camel-cxf-transport MAVEN version =4.15.0, =2.0.5, =2.0.5, =4.4.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.15.0, =4.18.1 and more Source cves: CVE-2026-47323 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16787112...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.8, <=1.5.10) +454 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

io.quarkiverse.cxf:quarkus-cxf (>=1.5.15, <=1.5.17), io.quarkiverse.cxf:quarkus-cxf-deployment (>=1.5.15, <=1.5.17) +133 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.13.8.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15,...

EUVD-2024-3074

Malicious code in bioql PyPI...

io.quarkiverse.cxf:quarkus-cxf (1.5.7), io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.7) +273 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.13.4.final)

io.quarkus:quarkus-vertx MAVEN version 2.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 1.5.7 - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.7 -...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

com.github.shumonsharif:quarkus-cxf (1.0.0-alpha-01), com.github.shumonsharif:quarkus-cxf-deployment (1.0.0-alpha-01) +45 more potentially affected by CVE-2024-12397 via io.quarkus.http:quarkus-http-core (3.0.11.final)

io.quarkus.http:quarkus-http-core MAVEN version 3.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.http:quarkus-http-core and may be impacted: - com.github.shumonsharif:quarkus-cxf 1.0.0-alpha-01 -...

Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP2)

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available RHBQ 3.8.6.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

io.quarkiverse.cxf:quarkus-cxf: Quarkus CXF may log user password and secret to application log

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configuration to be vulnerable, such as SOAP logging enabled, application set client, and endpoint logging...

Log Injection

io.quarkiverse.cxf, quarkus-cxf is vulnerable to Log Injection. The vulnerability is due to misconfiguration of logging settings, which results in passwords and other secrets being logged; specific configurations, such as enabled SOAP logging and access to application logs, allow attackers to...

io.quarkiverse.cxf:quarkus-cxf-deployment (0.10.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (0.10.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (0.10.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 0.10.0 - io.quarkiverse.cxf:quarkus-cxf-integration-test...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (1.5.2) +8 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.2 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.2.7), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.2.7) +26 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.2.7)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.2.7 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.0.0.alpha2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.0.0.alpha2) +18 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.0.0.alpha2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.0.0.alpha2 -...