quarkiverse
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| quarkus-openapi-generator | 2 | – | May 9, 2026 |
| quarkus-langchain4j | 1 | – | Oct 11, 2026 |
Exploited and recent CVEs
- CVE-2026-108748 Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket 0.4%
- CVE-2026-42333 quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations 0.4%
- CVE-2026-40180 Zip Slip Path Traversal in quarkus-openapi-generator ApicurioCodegenWrapper class 0.4%