No title provided

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-76763 Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

EUVD-2026-68525

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-76763 Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-76763

SmallRye GraphQL contains a flaw in its number scalar coercion for BigInteger , which fails to properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can send a GraphQL query containing a large exponent float literal, triggering the allocation of extremely l...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-76763: Improper Validation of Specified Quantity in Input

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

PT-2026-83837

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service (CVE-2025-2240)

Summary IBM Event Streams is vulnerable to a denial of service due to an out‑of‑memory condition in smallrye-fault-tolerance. Vulnerability Details CVEID:CVE-2025-2240 DESCRIPTION: A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This...

EUVD-2025-6307

Malicious code in bioql PyPI...

EUVD-2022-6599

Malicious code in bioql PyPI...

EUVD-2022-1318

Malicious code in bioql PyPI...

Security Bulletin: Vulnerabilities in Smallrye affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Smallrye has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-2240 DESCRIPTION: A flaw w...

io.quarkus:quarkus-smallrye-reactive-messaging-kafka (0.12.0), io.quarkus:quarkus-vertx-web (0.12.0) potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.12.0)

io.quarkus:quarkus-vertx MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-smallrye-reactive-messaging-kafka 0.12.0 - io.quarkus:quarkus-vertx-web 0.12.0 Source cves:...

io.quarkus:quarkus-mailer (1.1.1.final), io.quarkus:quarkus-mailer-deployment (1.1.1.final) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.1.1.final)

io.quarkus:quarkus-vertx MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.1.1.final - io.quarkus:quarkus-mailer-deployment 1.1.1.final -...

io.quarkus:quarkus-mailer (1.3.2.final), io.quarkus:quarkus-mailer-deployment (1.3.2.final) +34 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.2.final)

io.quarkus:quarkus-vertx MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.2.final - io.quarkus:quarkus-mailer-deployment 1.3.2.final -...

com.datastax.oss.quarkus:cassandra-quarkus-integration-tests (>=1.0.0-alpha2, <=1.0.0-alpha3), io.backpackcloud:fakeomatic (>=0.1.0, <=0.2.1) +39 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.5.0.final)

io.quarkus:quarkus-vertx MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-integration-tests =1.0.0-alpha2, =0.1.0, =0.2.1 -...

io.quarkus:quarkus-smallrye-reactive-messaging-kafka-deployment (0.14.0), io.quarkus:quarkus-vertx-deployment (0.14.0) +2 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.14.0)

io.quarkus:quarkus-vertx MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-smallrye-reactive-messaging-kafka-deployment 0.14.0 - io.quarkus:quarkus-vertx-deployment...

io.quarkus:quarkus-mailer (0.21.0), io.quarkus:quarkus-mailer-deployment (0.21.0) +15 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.21.0)

io.quarkus:quarkus-vertx MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.21.0 - io.quarkus:quarkus-mailer-deployment 0.21.0 -...