io.quarkus:quarkus-amazon-lambda-http (1.10.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.0.cr1) +75 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.10.0.cr1 -...

io.quarkus:quarkus-amazon-lambda-http (1.3.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.4.final) +53 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.4.final -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (1.2.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (1.2.0) +240 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.3.0, <=3.3.2)

io.quarkus:quarkus-vertx-http MAVEN version =3.3.0, =0.0.10, =1.8.1, =1.8.1, =1.8.6, =1.8.6, =1.9.0, =1.9.0, =1.10.1, =1.10.1, =1.10.3 and more Source cves: CVE-2023-4853 Source advisory: OSV:GHSA-4F4R-WGV2-JJVG...

io.quarkus:quarkus-amazon-lambda-http (1.0.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.0.0.cr2) +47 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.0.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.0.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

com.datastax.oss.quarkus:cassandra-quarkus-client (1.0.0), com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (1.0.0) +401 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.8.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-client 1.0.0 -...

io.quarkus:quarkus-amazon-lambda-http (0.28.0), io.quarkus:quarkus-amazon-lambda-http-deployment (0.28.0) +47 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.28.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 0.28.0 - io.quarkus:quarkus-amazon-lambda-http-deployment 0.28...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.5.0-alpha4, <=1.5.0-alpha5), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.5.0-alpha4, <=1.5.0-alpha5) +249 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.5.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.5.0-alpha4, =1.5.0-alpha4, =1.5.0-alpha...

br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +84 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.9.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - br.com.labbs:quarkus-monitor =0.1.5, =0.1.5, =0.3.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.1.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.1.0) +921 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.0.0.final, <=3.2.5.final)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.final, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.28 and more Source cves: CVE-2023-4853 Source advisory: OSV:GHSA-4F4R-WGV2-JJVG...

com.datastax.oss.quarkus:cassandra-quarkus-client (1.0.1), com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (1.0.1) +127 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.12.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.12.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-client 1.0.1 -...

io.quarkus:quarkus-amazon-lambda-http (1.7.5.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.5.final) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.5.final -...

io.quarkus:quarkus-amazon-lambda-http (1.0.0.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.0.0.final) +47 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.0.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.0.0.final -...

io.quarkus:quarkus-amazon-lambda-http (1.0.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.0.0.cr1) +91 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.0.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.0.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

com.github.adminfaces:quarkus-omnifaces (1.2.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.2.0) +405 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.12.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.2.0 -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.1.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.1.0) +921 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.0.0.final, <=3.2.5.final)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.final, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.28 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (1.2.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (1.2.0) +240 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.3.0, <=3.3.2)

io.quarkus:quarkus-vertx-http MAVEN version =3.3.0, =0.0.10, =1.8.1, =1.8.1, =1.8.6, =1.8.6, =1.9.0, =1.9.0, =1.10.1, =1.10.1, =1.10.3 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=0.8.40), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=0.8.40) +1818 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=0.23.0, <=2.16.10.final)

io.quarkus:quarkus-vertx-http MAVEN version =0.23.0, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.1.5, =0.1.5, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =1.0.1 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853https://vulne...

Cross-site Scripting (XSS)

quarkus-vertx-http is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library's form authentication session cookie path attribute is set to /, which allows an attacker to redirect malicious URLs, resulting in information disclosure...

io.quarkus:quarkus-amazon-lambda-http (1.2.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.2.0.cr1) +49 more potentially affected by CVE-2023-0044 via io.quarkus:quarkus-vertx-http (1.2.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.2.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...