Red Hat build of Quarkus 3.2.9.Final vulnerabilities

2 known vulnerabilities in Red Hat build of Quarkus 3.2.9.Final from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Red Hat build of Quarkus 2.13.9.Final: Improper Handling of Exceptional Conditions

  CVE-2023-6267Jan 25, 2024Red Hat

  A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and applied. This does not hap

• 9.1 Critical severity

  Red Hat build of Quarkus 2.13.9: Missing Authorization

  CVE-2023-6394Dec 9, 2023Red Hat

  A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an