Red Hat Inc. Red Hat build of Quarkus

Name: Red Hat Inc. Red Hat build of Quarkus
Brand: Red Hat Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical14high9medium1low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	no fix	2022-12-28	—
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	≤ 2.7.6
CVE-2021-41269US	critical9.8	4.35% (91st)	Exploit	no fix	2021-11-15	—
CVE-2022-45047US	critical9.8	3.81% (90th)	Exploit	no fix	2022-11-16	2 versions
CVE-2022-4244US	high7.5	1.35% (71st)	Exploit	no fix	2023-09-25	—
CVE-2023-26049US	medium5.3	1.30% (70th)	Exploit	no fix	2023-04-18	—
CVE-2022-4116US	critical9.8	32.5% (98th)	—	no fix	2022-11-22	—
CVE-2022-40152US	high7.5	18.2% (97th)	—	no fix	2022-09-16	—
CVE-2022-25647US	high7.5	12.2% (96th)	—	no fix	2022-05-01	—
CVE-2021-37137US	high7.5	6.57% (94th)	—	no fix	2021-10-19	2 versions
CVE-2021-38153US	medium5.9	6.20% (93rd)	—	no fix	2021-09-22	2 versions
CVE-2026-42198US	—	3.26% (88th)	—	no fix	2026-04-29	≤ 3.27.3.SP2
CVE-2020-28491US	high7.5	3.07% (88th)	—	no fix	2021-02-18	≤ 2.2.3
CVE-2021-43797US	medium6.5	2.88% (87th)	—	no fix	2021-12-09	≤ 2.7.5
CVE-2021-23463US	critical9.1	2.79% (86th)	—	no fix	2021-12-10	—
CVE-2021-31684US	high7.5	2.28% (83rd)	—	no fix	2021-06-01	—
CVE-2023-39410US	high7.5	2.22% (83rd)	—	no fix	2023-09-29	≤ 3.2.9.Final
CVE-2025-24970US	—	2.19% (82nd)	—	no fix	2025-02-10	2 versions
CVE-2023-1108US	high7.5	1.77% (78th)	—	no fix	2023-09-14	—
CVE-2023-4853US	high8.1OT elevated	1.45% (73rd)	—	no fix	2023-09-20	—
CVE-2023-33008US	medium5.3	1.44% (73rd)	—	no fix	2023-07-07	—
CVE-2022-21363US	medium6.0	1.42% (73rd)	—	no fix	2022-01-19	—
CVE-2026-42578US	high7.5	1.06% (65th)	—	no fix	2026-05-13	2 versions
CVE-2022-24823US	medium5.5	1.04% (64th)	—	no fix	2022-05-06	—
CVE-2026-42587US	—	0.99% (62nd)	—	no fix	2026-05-13	2 versions
CVE-2020-8908US	low3.3	0.92% (60th)	—	no fix	2020-12-10	—
CVE-2023-2974US	high8.1	0.88% (59th)	—	no fix	2023-07-04	—
CVE-2026-42584US	critical9.1	0.84% (58th)	—	no fix	2026-05-13	2 versions
CVE-2023-6394US	critical9.1OT elevated	0.81% (57th)	—	no fix	2023-12-09	—
CVE-2026-40984US	—	0.79% (56th)	—	no fix	2026-06-09	—
CVE-2024-1726US	—	0.73% (54th)	—	no fix	2024-04-25	—
CVE-2022-4245US	medium4.3	0.69% (53rd)	—	no fix	2023-09-25	—
CVE-2026-40983US	—	0.63% (50th)	—	no fix	2026-06-09	—
CVE-2026-42581US	critical9.8	0.63% (50th)	—	no fix	2026-05-13	2 versions
CVE-2024-21098US	—	0.57% (47th)	—	no fix	2024-04-16	2 versions
CVE-2023-0044US	medium6.1	0.55% (46th)	—	no fix	2023-02-23	2 versions
CVE-2026-42585US	high7.5	0.27% (19th)	—	no fix	2026-05-13	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling5 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan