[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flDllQO6v7BPBFC75o22ks4L0HruQKWExemP24ge9cuk":3,"g5a-family:redhat\u002Fbuild_of_quarkus":126,"g5a-ex:redhat\u002Fbuild_of_quarkus@*":127},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":37,"kevVulnerabilities":99,"seoMetadata":104,"meta":123},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"redhat","build_of_quarkus",6,21,1,"2023-12-09",[14,18,21,23,25,27],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"2.0",2,{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},"2.13.0",{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},"2.13.8",{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},"2.2.5",{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},"2.7","Build Of Quarkus by Redhat is a technology product with 6 tracked versions and 21 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35,36],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},{"version":28,"cve_count":16,"kev_count":16,"has_kev":17},[38,46,53,60,65,71,77,82,88,93],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":4,"epssScore":45},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":43,"severity":51,"isKev":17,"epssScore":52},"CVE-2022-4116","A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.","2022-11-22",9.8,"Critical",0.32516,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":43,"severity":58,"isKev":17,"epssScore":59},"CVE-2019-14900","A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","2020-07-06",6.5,"Medium",0.02126,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":64},"CVE-2023-1108","A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.","2023-09-14",0.01771,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":70},"CVE-2023-4853","A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.","2023-09-20",8.1,0.01449,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":76},"CVE-2021-20218","A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod\u002Fcontainer to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2","2021-03-16",7.4,0.01312,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":81},"CVE-2022-1259","A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP\u002F2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.","2022-08-31",0.01305,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":87},"CVE-2022-1011","A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.","2022-03-18",7.8,0.01169,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":69,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":92},"CVE-2023-2974","A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.","2023-07-04",0.00882,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":43,"severity":58,"isKev":17,"epssScore":98},"CVE-2021-3642","A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.","2021-08-05",5.3,0.00846,[100],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"severity":44,"isKev":4,"epssScore":45,"cisaVulnName":101,"cisaDateAdded":41,"cisaShortDescription":102,"cisaRequiredAction":103},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Build Of Quarkus by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Build Of Quarkus by Redhat covering 6 versions with 21 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Build Of Quarkus vulnerabilities, Build Of Quarkus security, Build Of Quarkus CVE, Redhat Build Of Quarkus, Build Of Quarkus threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Build Of Quarkus KEV, Build Of Quarkus exploited vulnerabilities",{"@context":109,"@type":110,"name":111,"description":106,"url":112,"manufacturer":113,"applicationCategory":117,"softwareVersion":118,"mainEntity":119},"https:\u002F\u002Fschema.org","SoftwareApplication","Build Of Quarkus","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fbuild_of_quarkus",{"@type":114,"name":115,"url":116},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","6 versions tracked",{"@type":120,"name":121,"description":122,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Build Of Quarkus Security Vulnerabilities","Security vulnerabilities affecting Build Of Quarkus by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":124,"apiVersion":125},"2026-10-17T11:30:30.768Z","3.0",[],{"rows":128,"total":11,"capped":17,"failed":16},[129],{"cveId":39,"name":101,"severity":44,"cvss":42,"added":41,"epss":45,"published":130,"ranges":131,"checked":4,"hits":132,"covers":17},"2023-10-10T14:15:10.883",[],[]]