Red Hat Exploit Intelligence
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114236 | | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | LOW 3.3 | 0.1 % | ||
| CVE-2026-87744 | | Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-94451 | | Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort par… | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-94449 | | Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service | HIGH 7.5 | 0.6 % | ||
| CVE-2026-93432 | | Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus | MEDIUM 6.1 | 0.5 % | ||
| CVE-2026-87743 | | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security | HIGH 7.5 | 0.5 % | ||
| CVE-2026-87742 | | Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering | HIGH 7.5 | 0.8 % | ||
| CVE-2026-81829 | | Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver | MEDIUM 5.3 | 0.6 % |