Vendor

Quarkus

1 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2026-12894

Io.quarkus:quarkus-qute: quarkus-qute:server-side template injection (ssti) vulnerability in reflectionvalueresolver of the quarkus qute template engine

A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The issue exists in the component responsible for looking up data values (ReflectionValueResolver), which fails to properly block acc…

Red Hat Quarkus Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Apache Camel 4 for Quarkus 3

Aug 31, 2026