Product by Red Hat
Red Hat Build Of Quarkus
33 known vulnerabilities in Red Hat Build Of Quarkus (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2024-5971 | Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| High | CVE-2023-3223 | Undertow: outofmemoryerror due to @multipartconfig handling | 7.5 | |
| High | CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5 | |
| High | CVE-2024-1132 | Keycloak: path transversal in redirection validation | 8.1 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2023-4853 | Quarkus: http security policy bypass | 8.1 | |
| Medium | CVE-2024-1023 | Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx | 6.5 | |
| High | CVE-2025-2240 | Smallrye-fault-tolerance: smallrye fault tolerance | 7.5 | |
| Medium | CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 | |
| High | CVE-2022-4244 | Codehaus-plexus: directory traversal | 7.5 | |
| High | CVE-2026-9800 | Red Hat: Comparison Using Wrong Factors | 8.1 | |
| Medium | CVE-2026-10832 | Red Hat JBoss Enterprise Application Platform 8.1.8.GA: Allocation of Resources Without Limits or Throttling | 5.9 | |
| Medium | CVE-2024-1459 | Undertow: directory traversal vulnerability | 5.3 | |
| High | CVE-2023-4639 | Undertow: cookie smuggling/spoofing | 7.4 | |
| High | CVE-2025-1634 | Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout | 7.5 | |
| High | CVE-2022-1415 | Drools: unsafe data deserialization in streamutils | 8.1 | |
| Medium | CVE-2026-93432 | Red Hat build of Quarkus 3.27.6.redhat: Cross-site Scripting | 6.1 | |
| High | CVE-2023-5379 | Undertow: ajp request closes connection exceeding maxrequestsize | 7.5 | |
| Medium | CVE-2026-81829 | Red Hat build of Quarkus 3.27.5.SP2: Path Traversal | 5.3 | |
| High | CVE-2023-6841 | Keycloak: amount of attributes per object is not limited and it may lead to dos | 7.5 | |
| Critical | CVE-2023-6394 | Quarkus: graphql operations over websockets bypass | 7.4 | |
| Medium | CVE-2024-1300 | Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support | 5.4 | |
| Critical | CVE-2024-12225 | Io.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass | 9.1 |