Most recent entries from all

EUVD-2026-222192

fkie_cve-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

GHSA-j75r-vf64-6rrh — RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions

Affected: Maven: io.quarkus.resteasy.reactive:resteasy-reactive-common

In RestEasy Reactive implementation of Quarkus the insecure `File.createTempFile()` is used in the `FileBodyHandler` class which creates temp files with insecure permissions that could be read by a local user.

gsd-2023-0481

RHSA-2023:3809 — Red Hat Security Advisory: Red Hat build of Quarkus 2.13.8 release and security update

apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider quarkus: insecure permissions on temp files quarkus-oidc: ID and access tokens leak via the authorization code flow quarkus-core: TLS protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported TLS protocol graphql-java: crafted GraphQL query causes stack consumption