Red Hat build of Quarkus 3.27.3 vulnerabilities

3 known vulnerabilities in Red Hat build of Quarkus 3.27.3 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  netty: Allocation of Resources Without Limits or Throttling

  CVE-2026-33871Mar 27, 2026NettyEPSS 1.36%

  Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server

• 7.5 High severity

  netty: Inconsistent Interpretation of HTTP Requests

  CVE-2026-33870Mar 27, 2026Netty

  Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versi

• 8.8 High severity

  Red Hat build of Apache Camel 4.18.1 for…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-67030Mar 25, 2026Red Hat

  Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code