https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:18:44.478906+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08669 bdu:2023-08669 2026-10-07T03:18:44.496944+00:00 bdu:2023-08669 https://cve.radiocsirt.org/vuln/euvd-2026-377928 EUVD-2026-377928 2026-10-07T03:18:44.496989+00:00 EUVD-2026-377928 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6394 fkie_cve-2023-6394 2026-10-07T03:18:44.497014+00:00

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.

 https://cve.radiocsirt.org/vuln/ghsa-mvc8-6ffp-jrx5 GHSA-mvc8-6ffp-jrx5 — Authorization bypass in Quarkus 2026-10-07T03:18:44.497056+00:00

Affected: Maven: io.quarkus:quarkus-smallrye-graphql-client

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.

 https://cve.radiocsirt.org/vuln/gsd-2023-6394 gsd-2023-6394 2026-10-07T03:18:44.497098+00:00 gsd-2023-6394 https://cve.radiocsirt.org/vuln/rhsa-2023:7612 RHSA-2023:7612 — Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9 release and security update 2026-10-07T03:18:44.497119+00:00

quarkus: GraphQL operations over WebSockets bypass apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact