com.pro-crafting.tools:xmlpretty-web (1.0.0), io.apicurio:apicurio-registry-app (>=1.1.0.final, <=1.1.1.final) +121 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.2.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.pro-crafting.tools:xmlpretty-web 1.0.0 - io.apicurio:apicurio-registry-app =1.1.0.final,...

io.quarkus:quarkus-amazon-lambda-http (1.1.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.1.0.cr1) +51 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.1.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.1.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

com.cloudimpl:rest-api (2.1.0.9), com.cloudimpl:rest-service (2.1.0.9) +253 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.6.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.cloudimpl:rest-api 2.1.0.9 - com.cloudimpl:rest-service 2.1.0.9 -...

io.quarkus:quarkus-amazon-lambda-http (1.6.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.6.0.cr1) +69 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.6.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.6.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.6.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.backpackcloud:fakeomatic (0.3.0), io.github.project-openubl:xml-builder-server-x (1.2.0.rc1) +68 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.5.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.backpackcloud:fakeomatic 0.3.0 - io.github.project-openubl:xml-builder-server-x 1.2.0.rc1 -...

com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha3), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (1.5.0-alpha3) +77 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.4.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base 1.5.0-alpha3 -...

com.blazebit:blaze-persistence-examples-quarkus-base (1.5.0-alpha2), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (1.5.0-alpha2) +226 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.4.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base 1.5.0-alpha2 -...

io.quarkus:quarkus-amazon-lambda-http (1.3.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.4.final) +53 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.3.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.4.final -...

io.apicurio:apicurio-registry-common (>=1.2.2.final, <=1.2.3.final), io.quarkus:quarkus-amazon-lambda-http (1.3.3.final) +54 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.3.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.apicurio:apicurio-registry-common =1.2.2.final, =1.2.3.final -...

Incorrect Authorization

Overview io.quarkus:quarkus-vertx-http is a Cloud Native, Linux Container First framework for writing Java applications. Affected versions of this package are vulnerable to Incorrect Authorization when handling HTTP request paths that have had normalizedPath applied. An attacker can gain...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.20.1), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.20.1) +1794 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.0.0.alpha1, <=3.20.6)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.0.1, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.2, =0.0.1, =0.0.5 and more Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420254...

io.quarkiverse.amazonservices:quarkus-amazon-services-integration-tests (>=3.17.0.cr1, <=3.18.0), io.quarkiverse.asyncapi:quarkus-asyncapi-scanner (1.0.6) +443 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.35.0.cr1, <=3.35.0)

io.quarkus:quarkus-vertx-http MAVEN version =3.35.0.cr1, =3.17.0.cr1, =3.18.0 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner 1.0.6 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner-deployment 1.0.6 - io.quarkiverse.asyncapi:quarkus-asyncapi-scanner-tests-simple 1.0.6 -...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +1253 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.21.0, <=3.27.3)

io.quarkus:quarkus-vertx-http MAVEN version =3.21.0, =0.1.0, =0.1.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.8 and more Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420254...

ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +1094 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.28.0, <=3.33.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.28.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.0.2, =0.0.18 and more Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420254...

ai.pipestream:pipestream-server (>=0.7.23, <=0.7.24), ai.pipestream:pipestream-server-deployment (>=0.7.23, <=0.7.24) +272 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (>=3.34.0.cr1, <=3.34.6)

io.quarkus:quarkus-vertx-http MAVEN version =3.34.0.cr1, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.23, =0.7.24 - ai.timefold.solver.enterprise:timefold-solver-enterprise-quarkus-integration-test 2.0.0 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.26.2), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.26.2) +1975 more potentially affected by CVE-2025-11537 via io.quarkus:quarkus-vertx-http (>=3.0.0.alpha1, <=3.27.1)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.0.6, =0.0.1, =0.0.6, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =0.0.5 and more Source cves: CVE-2025-11537 Source advisory: SNYK:JAVA-IOQUARKUS-15265250...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=1.27.0, <=1.28.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=1.27.0, <=1.28.0) +567 more potentially affected by CVE-2025-11537 via io.quarkus:quarkus-vertx-http (>=3.28.0.cr1, <=3.29.0)

io.quarkus:quarkus-vertx-http MAVEN version =3.28.0.cr1, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.28.0 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics 0.1.0-rc26 - at.meks.quarkiverse.axonframework-extension:quarkus-axon-metrics-deployment 0.1.0-rc26 -...

Improper Output Neutralization for Logs

Overview io.quarkus:quarkus-vertx-http is a Cloud Native, Linux Container First framework for writing Java applications. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in the HTTP access logs with long pattern when the logging format is set to a verbos...

io.quarkus:quarkus-vertx-http-deployment (>=2.13.0.cr1, <=3.3.3) potentially affected by CVE-2025-47204 via org.webjars:bootstrap-multiselect (0.9.15)

org.webjars:bootstrap-multiselect MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap-multiselect and may be impacted: - io.quarkus:quarkus-vertx-http-deployment =2.13.0.cr1, =3.3.3 Source cves: CVE-2025-47204...

Important: Red Hat Security Advisory: Red Hat Integration Camel K 1.10.2 release security update

Red Hat Integration Camel K 1.10.2 release and security update is now available. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...