Quarkiverse vulnerabilities
We track 1 vulnerability in Quarkiverse products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Quarkiverse vulnerabilities
- 7.5 High severity
quarkus-openapi-generator: Improper Limitation of a Pathname to a Restricted Directory
Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip() method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path s