CVE-2022-2466
1 advisory.
Maven/io.quarkus:quarkus-core-parent CVE-2022-2466: critical 9.8, EPSS 1.87%
Quarkus does not terminate HTTP requests header context
Action: Upgrade io.quarkus:quarkus-core-parent to 2.10.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.0 | 2.10.4 | - |
Fixed versions
| 2.10.4 |
Sources
- osv: GHSA-mwhw-6p27-4crc
- https://nvd.nist.gov/vuln/detail/CVE-2022-2466
- https://github.com/quarkusio/quarkus/issues/26748
- https://github.com/quarkusio/quarkus
- https://github.com/quarkusio/quarkus/releases/tag/2.10.4.Final
CVE-2022-2466 · published · modified · JSON