pkg:maven/io.quarkus/quarkus-vertx-http
Type
maven
Namespace
io.quarkus
Name
quarkus-vertx-http
Known advisories, vulnerabilities and fixes for io.quarkus/quarkus-vertx-http package.
High
2
Moderate
1
| Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
|---|---|---|---|---|---|---|---|
| Affected | >= 3.3.0, < 3.3.3 >= 3.0.0, < 3.2.6.Final < 2.16.11.Final |
CVE-2023-4853
|
 MAVEN:GHSA-4F4R-WGV2-JJVG
|
Quarkus HTTP vulnerable to incorrect evaluation of permissions | high |
2023-09-20T12:30:22
(12 months ago) |
|
| Fixed | = 3.3.3 = 3.2.6.Final = 2.16.11.Final |
CVE-2023-4853
|
MAVEN:GHSA-4F4R-WGV2-JJVG
|
Quarkus HTTP vulnerable to incorrect evaluation of permissions | high |
2023-09-20T12:30:22
(12 months ago) |
|
| Affected | < 2.13.5.Final >= 2.14.0.CR1, < 2.14.2.Final |
CVE-2022-4147
|
MAVEN:GHSA-9895-G6X5-XWCP
|
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed | high |
2022-12-06T21:30:46
(21 months ago) |
|
| Fixed | = 2.13.5.Final = 2.14.2.Final |
CVE-2022-4147
|
MAVEN:GHSA-9895-G6X5-XWCP
|
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed | high |
2022-12-06T21:30:46
(21 months ago) |
|
| Affected | < 2.13.7.Final |
CVE-2023-0044
|
MAVEN:GHSA-C57V-HC7M-8PX2
|
Cross-site Scripting in Quarkus | moderate |
2023-02-23T21:30:16
(19 months ago) |
|
| Fixed | = 2.13.7.Final |
CVE-2023-0044
|
MAVEN:GHSA-C57V-HC7M-8PX2
|
Cross-site Scripting in Quarkus | moderate |
2023-02-23T21:30:16
(19 months ago) |