Vendor

quarkiverse

3 known vulnerabilities.

Products

quarkus-openapi-generator 2 quarkus-langchain4j 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.7

CVE-2026-40180

Zip Slip Path Traversal in quarkus-openapi-generator ApicurioCodegenWrapper class

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip() method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path …

quarkiverse quarkus-openapi-generator io.quarkiverse.openapi.generator:quarkus-openapi-generator Maven

Apr 10, 2026