Quarkus
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 54 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 15, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus
Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
GHSL-2026-099: Authorization Bypass in Quarkus - CVE-2026-39852
Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write
Io.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass
Quarkus: graphql operations over websockets bypass
Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
Monitor Quarkus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.