Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:12:15 +0000 bdu:2023-08669 https://cve.radiocsirt.org/vuln/bdu:2023-08669 bdu:2023-08669 https://cve.radiocsirt.org/vuln/bdu:2023-08669 EUVD-2026-377928 https://cve.radiocsirt.org/vuln/euvd-2026-377928 EUVD-2026-377928 https://cve.radiocsirt.org/vuln/euvd-2026-377928 fkie_cve-2023-6394 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6394 <p>A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.</p> <p>A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6394 GHSA-mvc8-6ffp-jrx5 — Authorization bypass in Quarkus https://cve.radiocsirt.org/vuln/ghsa-mvc8-6ffp-jrx5 <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-smallrye-graphql-client</p> <p>A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.</p> <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-smallrye-graphql-client</p> <p>A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-mvc8-6ffp-jrx5 gsd-2023-6394 https://cve.radiocsirt.org/vuln/gsd-2023-6394 gsd-2023-6394 https://cve.radiocsirt.org/vuln/gsd-2023-6394 RHSA-2023:7612 — Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9 release and security update https://cve.radiocsirt.org/vuln/rhsa-2023:7612 <p>quarkus: GraphQL operations over WebSockets bypass apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact</p> <p>quarkus: GraphQL operations over WebSockets bypass apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7612