Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat build of Apache Camel 4 for Quarkus 3/quarkus-cxf-bom
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type
CVE-2025-27427 · GHSA-3W85-5P9G-H334
org.apache.activemq:artemis-server
A-MQ Clients 2/artemis-core-client
Maven
Red Hat
Low
Fix reported
2026-09-10
Spring Framework vulnerable to a reflected file download (RFD)
CVE-2025-41234 · GHSA-6R3C-XF4W-JXJM
org.springframework:spring-web
OpenShift Developer Tools and Services/jenkins
Maven
Red Hat
Medium
Fix reported
2026-09-10
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation
CVE-2025-49128 · GHSA-WF8F-6423-GFXG
com.fasterxml.jackson.core:jackson-core
Cryostat 4/jackson-core
Maven
Red Hat
Medium
Fix reported
2026-09-10
Quarkus potentially leaks data when duplicating a duplicated context
CVE-2025-49574 · GHSA-9623-MJ7J-P9V4
io.quarkus:quarkus-vertx
Cryostat 4/quarkus-vertx
Maven
Red Hat
Medium
Fix reported
2026-09-10
Apache Commons Improper Access Control vulnerability
CVE-2025-48734 · GHSA-WXR5-93PH-8WR9
commons-beanutils:commons-beanutils
org.apache.commons:commons-beanutils2
Maven
Red Hat
High
Fix reported
2026-09-10
io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling
CVE-2024-12397 · GHSA-CXRX-Q234-M22M
io.quarkus.http:quarkus-http-core
Cryostat 3/quarkus-http-core
Maven
Red Hat
High
Fix reported
2026-09-10
Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader
CVE-2024-47554 · GHSA-78WR-2P64-HPWJ
commons-io:commons-io
A-MQ Clients 2/commons-io
Maven
Red Hat
High
Fix reported
2026-09-10
Apache ActiveMQ Artemis Vulnerable to Insertion of Sensitive Information into Log File
CVE-2025-27391 · GHSA-PM4J-P7PM-FPVX
org.apache.activemq:artemis-project
A-MQ Clients 2/artemis-core-client
Maven
Red Hat
Medium
Fix reported
2025-07-15