CVE-2026-87744Critical 9.1Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations0.4%
CVE-2026-94451Medium 6.5Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache0.3%
CVE-2026-94449High 7.5Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service1.1%
CVE-2026-93432Medium 6.1Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus1.2%
CVE-2026-89058High 7.4Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config0.5%