CVE-2026-40180
1 advisory.
Maven/io.quarkiverse.openapi.generator:quarkus-openapi-generator CVE-2026-40180: medium, EPSS 0.51%
quarkus-openapi-generator extension has Zip Slip Path Traversal in ApicurioCodegenWrapper class
Action: Upgrade io.quarkiverse.openapi.generator:quarkus-openapi-generator to 2.16.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.16.0 | - |
Fixed versions
| 2.16.0 |
Sources
- osv: GHSA-jx2w-vp7f-456q
- https://github.com/quarkiverse/quarkus-openapi-generator/security/advisories/GHSA-jx2w-vp7f-456q
- https://nvd.nist.gov/vuln/detail/CVE-2026-40180
- https://github.com/quarkiverse/quarkus-openapi-generator/commit/08b406414ff30ed192e86c7fa924e57565534ff0
- https://github.com/quarkiverse/quarkus-openapi-generator/commit/e2a9c629a3df719abc74569a3795c265fd0e1239
- https://github.com/quarkiverse/quarkus-openapi-generator
CVE-2026-40180 · published · modified · JSON