Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.quarkiverse.openapi.generator:quarkus-openapi-generator

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
2.24.0 (Oct 27, 2026): no advisory affects it
Newest unaffected release
2.24.0 (Oct 27, 2026), the latest release
Advisories
2 · 1 high, 1 medium
Dependents
3
Releases
104 since 0.1.0 (Feb 16, 2022)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • CVE-2026-42333Medium 6.3

    quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations

    Affected: fixed in 2.16.0-lts; from 2.16.0, fixed in 2.17.0.

    Fixed in 2.17.0 (released Apr 23, 2026, 16 days before disclosure).

    The latest release, 2.24.0, is not affected.

  • Zip Slip Path Traversal in quarkus-openapi-generator ApicurioCodegenWrapper class

    Affected: fixed in 2.16.0.

    Fixed in 2.16.0 (released Apr 7, 2026, 3 days before disclosure).

    The latest release, 2.24.0, is not affected.