Red Hat build of Quarkus 3.15.3.SP1 vulnerabilities

2 known vulnerabilities in Red Hat build of Quarkus 3.15.3.SP1 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Build of Apache Camel 4.8 for Quarkus…: Missing Release of Memory after Effective Lifetime

  CVE-2025-1634Feb 26, 2025Red Hat

  A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash d

• 8.3 High severity

  Red Hat Build of Apache Camel 4.8 for Quarkus…: Exposure of Data Element to Wrong Session

  CVE-2025-1247Feb 13, 2025Red Hat

  A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive inf