Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.quarkus:quarkus-rest

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high, 1 medium
Registry
Maven Central

Advisories 2

  • CVE-2025-66560Medium 5.9

    Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write

    Affected: fixed in 3.20.5; from 3.21.0, fixed in 3.27.2; from 3.30.0, fixed in 3.31.0.

  • Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance

    Affected: from 3.16.0.CR1, fixed in 3.18.2; from 3.9.0.CR1, fixed in 3.15.3.1; fixed in 3.8.6.1.