{"action":"Upgrade io.quarkus:quarkus-core-parent to 2.10.4 or later.","affected":[{"fixed":"2.10.4","introduced":"2.10.0"}],"component":"io.quarkus:quarkus-core-parent","cve_ids":["CVE-2022-2466"],"ecosystem":"Maven","epss":0.01911,"exploited":false,"fixed_versions":["2.10.4"],"ghsa_id":"GHSA-mwhw-6p27-4crc","id":"tcs_01M5N95ZHDFFP3KT5SFWP15E5W","modified_at":"2023-11-08T04:08:32.348432Z","published_at":"2022-09-01T00:00:23Z","references":["https://osv.dev/vulnerability/GHSA-mwhw-6p27-4crc","https://nvd.nist.gov/vuln/detail/CVE-2022-2466","https://github.com/quarkusio/quarkus/issues/26748","https://github.com/quarkusio/quarkus","https://github.com/quarkusio/quarkus/releases/tag/2.10.4.Final"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mwhw-6p27-4crc","url":"https://osv.dev/vulnerability/GHSA-mwhw-6p27-4crc"}],"summary":"Quarkus does not terminate HTTP requests header context"}