https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:01:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-261495 EUVD-2026-261495 https://cve.radiocsirt.org/vuln/euvd-2026-261495 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5675 <p>A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either &#39;quarkus.security.jaxrs.deny-unannotated-endpoints&#39; or &#39;quarkus.security.jaxrs.default-roles-allowed&#39; properties.</p> <p>A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either &#39;quarkus.security.jaxrs.deny-unannotated-endpoints&#39; or &#39;quarkus.security.jaxrs.default-roles-allowed&#39; properties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5675 https://cve.radiocsirt.org/vuln/ghsa-25w4-hfqg-4r52 <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-resteasy-reactive-common-deployment, Maven: io.quarkus:quarkus-resteasy-reactive-common</p> <p>A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either &#39;quarkus.security.jaxrs.deny-unannotated-endpoints&#39; or &#39;quarkus.security.jaxrs.default-roles-allowed&#39; properties.</p> <p>While backports of this fix exist in versions 3.6.9 and 3.7.1 users of older versions are encouraged to update to the 3.8.x LTS branch.</p> <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-resteasy-reactive-common-deployment, Maven: io.quarkus:quarkus-resteasy-reactive-common</p> <p>A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either &#39;quarkus.security.jaxrs.deny-unannotated-endpoints&#39; or &#39;quarkus.security.jaxrs.default-roles-allowed&#39; properties.</p> <p>While backports of this fix exist in versions 3.6.9 and 3.7.1 users of older versions are encouraged to update to the 3.8.x LTS branch.</p> https://cve.radiocsirt.org/vuln/ghsa-25w4-hfqg-4r52 https://cve.radiocsirt.org/vuln/gsd-2023-5675 gsd-2023-5675 https://cve.radiocsirt.org/vuln/gsd-2023-5675 https://cve.radiocsirt.org/vuln/rhsa-2024:0494 <p>quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when &#34;quarkus.security.jaxrs.deny-unannotated-endpoints&#34; or &#34;quarkus.security.jaxrs.default-roles-allowed&#34; properties are used. quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.</p> <p>quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when &#34;quarkus.security.jaxrs.deny-unannotated-endpoints&#34; or &#34;quarkus.security.jaxrs.default-roles-allowed&#34; properties are used. quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0494 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0203 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0203