CVE-2026-107912High 7.7Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw0.2%
CVE-2026-107174Medium 6.4Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction0.3%
CVE-2026-87743High 7.5Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security0.5%
CVE-2024-3884High 7.5Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded1.5%
CVE-2025-10894Critical 9.6Nx: nx/devkit: malicious versions of nx and plugins published to npm0.6%
CVE-2025-8556Low 3.7Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results0.5%
CVE-2024-11831Medium 5.4Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript1.1%
CVE-2024-12401Medium 4.4Cert-manager: potential dos when parsing specially crafted pem inputs0.7%
CVE-2024-9355Medium 6.5Golang-fips: golang fips zeroed buffer0.3%
CVE-2024-3653Medium 5.3Undertow: learningpushhandler can lead to remote memory dos attacks1.9%
CVE-2023-5675Medium 6.5Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.0.5%
CVE-2024-1300Medium 5.4Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support1.1%
CVE-2024-1023Medium 6.5Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx1.7%
CVE-2024-1635High 7.5Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol4.6%