io.quarkus:quarkus-spring-web-deployment (>=3.33.0, <=3.33.3.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.33.0, <=3.33.3.1)

io.quarkus:quarkus-spring-web MAVEN version =3.33.0, =3.33.0, =3.33.3.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...

io.quarkus:quarkus-spring-web-deployment (>=3.27.0, <=3.27.5.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.27.0, <=3.27.5.1)

io.quarkus:quarkus-spring-web MAVEN version =3.27.0, =3.27.0, =3.27.5.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...

No title provided

A flaw was found in quarkus-spring-web. A remote attacker could exploit this vulnerability by manipulating the URL query string. The system incorrectly reads the URL query string as a request header, which can lead to an authorization bypass, allowing unauthorized access to resources...

No title provided

A flaw was found in quarkus-spring-web. A remote attacker could exploit this vulnerability by manipulating the URL query string. The system incorrectly reads the URL query string as a request header, which can lead to an authorization bypass, allowing unauthorized access to resources...

CVE-2026-19651

A flaw was found in quarkus-spring-web. A remote attacker could exploit this vulnerability by manipulating the URL query string. The system incorrectly reads the URL query string as a request header, which can lead to an authorization bypass, allowing unauthorized access to resources. Mitigation...