quarkus-rest vulnerabilities

CVEs whose affected-version data names the quarkus-rest package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-1247High· 8.3

1y ago

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, …

▾ TwilightRed Hat · quarkus-restEPSS 0.82%via NVD