{"action":"Upgrade io.quarkus:quarkus-smallrye-graphql-client to 2.13.9.Final (2.x) or 3.5.3 (3.x) or later.","affected":[{"fixed":"3.5.3","introduced":"2.14.0"},{"fixed":"2.13.9.Final","introduced":"0"}],"component":"io.quarkus:quarkus-smallrye-graphql-client","cve_ids":["CVE-2023-6394"],"ecosystem":"Maven","epss":0.00807,"exploited":false,"fixed_versions":["3.5.3","2.13.9.Final"],"ghsa_id":"GHSA-mvc8-6ffp-jrx5","id":"tcs_01M5N95T4FGT9EE1H1GM8N4KB6","modified_at":"2026-02-28T06:03:36.517738Z","published_at":"2023-12-09T03:30:15Z","references":["https://osv.dev/vulnerability/GHSA-mvc8-6ffp-jrx5","https://nvd.nist.gov/vuln/detail/CVE-2023-6394","https://github.com/quarkusio/quarkus/pull/36961","https://access.redhat.com/errata/RHSA-2023:7612","https://access.redhat.com/errata/RHSA-2023:7700","https://access.redhat.com/security/cve/CVE-2023-6394","https://bugzilla.redhat.com/show_bug.cgi?id=2252197","https://github.com/quarkusio/quarkus","https://github.com/quarkusio/quarkus/releases/tag/2.13.9.Final","https://github.com/quarkusio/quarkus/releases/tag/3.5.3"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-mvc8-6ffp-jrx5","url":"https://osv.dev/vulnerability/GHSA-mvc8-6ffp-jrx5"}],"summary":"Authorization bypass in Quarkus"}