Security Bulletin: IBM Event Streams is vulnerable to a denial of service

Summary IBM Event Streams is vulnerable to a denial of service due to improper buffer release in quarkus-resteasy. CVE-2025-1634 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

Important: Red Hat Security Advisory: Streams for Apache Kafka 3.1.0 release and security update

Streams for Apache Kafka 3.1.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EUVD-2025-5294

Malicious code in bioql PyPI...

Security Bulletin: Vulnerabilities in quarkus-resteasy affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in quarkus-resteasy has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: ...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

Security Bulletin: Vulnerabilities in quarkus-resteasy affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in quarkus-resteasy has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: ...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

Denial Of Service (DoS)

io.quarkus, quarkus-resteasy is vulnerable to Denial Of Service DoS. The vulnerability is due to improper resource management, where a buffer is not correctly released when a client request times out. It allows an attacker to trigger memory leaks by sending multiple client requests with low...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

GHSA-4FWR-MH5Q-HCHH io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.10.0, <=1.15.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.10.0, <=1.15.0) +494 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.9.0.cr1, <=3.15.3)

io.quarkus:quarkus-resteasy MAVEN version =3.9.0.cr1, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =2.4.0, =1.4.0, =1.4.0, =3.0.4, =2.6.6.final, =3.0.4, =3.0.4, =3.0.6 and more Source cves: CVE-2025-1634 Source advisory: OSV:GHSA-4FWR-MH5Q-HCHH...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.6.0, <=1.6.4), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.6.0, <=1.6.4) +329 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.11.0.final)

io.quarkus:quarkus-resteasy MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.6.0, =1.6.0, =1.6.1, =1.6.0, =1.6.0, =1.6....

io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.11.6.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.11.6.final) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.11.6.final)

io.quarkus:quarkus-resteasy MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.11.6.final -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (1.13.0.cr1), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (1.13.0.cr1) +21 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.0.cr1)

io.quarkus:quarkus-resteasy MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 1.13.0.cr1 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (>=1.9.0, <=1.9.2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (>=1.9.0, <=1.9.2) +24 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (1.13.6.final)

io.quarkus:quarkus-resteasy MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests =1.9.0, =1.9.0, =1.9.2 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0.beta2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0.beta2) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0.beta2 -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.0.2.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.0.2.final) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.0.2.final -...