Skip to content
OpenAdvisories

Vendor

quarkiverse

3 known vulnerabilities.

Products

quarkus-openapi-generator 2 quarkus-langchain4j 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-108748

    Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket

    Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reu…

    quarkiverse quarkus-langchain4j
  • Medium 6.3
    CVE-2026-42333

    quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations

    Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to versions 2.11.1-lts, 2.16.0-lts, and 2.17.0, the generated authentication filter matches OpenAPI path templates too broadly when deciding whe…

    quarkiverse quarkus-openapi-generator io.quarkiverse.openapi.generator:quarkus-openapi-generator Maven