https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:31:05 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-77874 <p>IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.</p> <p>IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-77874 https://vulnerability.circl.lu/vuln/ghsa-hcr5-gpj4-pqhc <p>IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.</p> <p>IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.</p> https://vulnerability.circl.lu/vuln/ghsa-hcr5-gpj4-pqhc https://vulnerability.circl.lu/vuln/rhsa-2026:69440 <p>org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding io.projectreactor/reactor-core: Reactor Core: Denial of Service via Flux.windowTimeout operator with fairBackpressure io.projectreactor/reactor-core: Reactor Core: Denial of Service in bufferTimeout operator org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: Unauthenticated same-origin SSRF via unsanitized JWT kid header in AwsAlbKeyResolver quarkus-websockets-next: Denial of Service (OOM) in quarkus-websockets-next via unbounded message buffering quarkus-vertx-http: Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security com.github.luben/zstd-jni: zstd-jni: Out-of-bounds read in ZstdDictCompress constructor leads to denial of service com.github.luben/zstd-jni: zstd-jni: Denial of Service or Information Disclosure via out-of-bounds read com.github.luben/zstd-jni: zstd-jni…</p> <p>org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding io.projectreactor/reactor-core: Reactor Core: Denial of Service via Flux.windowTimeout operator with fairBackpressure io.projectreactor/reactor-core: Reactor Core: Denial of Service in bufferTimeout operator org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: Unauthenticated same-origin SSRF via unsanitized JWT kid header in AwsAlbKeyResolver quarkus-websockets-next: Denial of Service (OOM) in quarkus-websockets-next via unbounded message buffering quarkus-vertx-http: Authorization Bypass via Path Normalization Discrepancy in Quarkus HTTP Security com.github.luben/zstd-jni: zstd-jni: Out-of-bounds read in ZstdDictCompress constructor leads to denial of service com.github.luben/zstd-jni: zstd-jni: Denial of Service or Information Disclosure via out-of-bounds read com.github.luben/zstd-jni: zstd-jni…</p> https://vulnerability.circl.lu/vuln/rhsa-2026:69440