Security Bulletin: IBM Event Streams is vulnerable to a denial of service

Summary IBM Event Streams is vulnerable to a denial of service due to improper buffer release in quarkus-resteasy. CVE-2025-1634 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +821 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (>=3.0.0.Alpha1 <=3.8.6)

io.quarkus:quarkus-resteasy MAVEN version =3.0.0.Alpha1, =0.1.0, =0.1.0, =0.7.20, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.9, =1.6.18 - com.blaze...