quarkusio

Products

ProductCVEsExploitedLatest
quarkus4–Jun 19, 2026

Exploited and recent CVEs

  • CVE-2026-50559 High 7.5 Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities 1.0%
  • CVE-2026-39852 High 8.2 Quarkus authorization bypass via semicolon path normalization inconsistency 0.7%
  • CVE-2025-66560 Medium 5.9 Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write 0.4%
  • CVE-2025-49574 Medium 6.4 Quarkus potential data leak when duplicating a duplicated context 0.3%