Skip to content

Vendor

io.quarkus.http vulnerabilities

1 published CVE affecting io.quarkus.http, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of io.quarkus.http alerts

Products

Latest io.quarkus.http CVEs

Newest publication first

  1. CVE-2024-12397 Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

    Published
    HighCVSS 7.4 EPSS 0.93%

    A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leadi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.