critical9.8
CVE-2022-2466
Quarkus does not terminate HTTP requests header context
Impact
Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior. This issue was fixed in version 2.10.4Final.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.quarkus:quarkus-core-parent | >= 2.10.0, < 2.10.4 | 2.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quarkus | Quarkus | from 2.10.0 before 2.10.4 |