quarkus-cxf-bom vulnerabilities

CVEs whose affected-version data names the quarkus-cxf-bom package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-2240High· 7.5

1y ago

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may …

▾ TwilightRed Hat · smallrye-fault-tolerance-coreEPSS 1.2%via NVD