~ / search / GHSA-4fwr-mh5q-hchh

GHSA-4fwr-mh5q-hchh

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

Source: GitHub Advisory Database (reviewed) High CVE-2025-1634

Packages

EcosystemPackageAffectedFixed in
Maven io.quarkus:quarkus-resteasy >= 3.16.0.CR1, < 3.19.1 3.19.1
Maven io.quarkus:quarkus-resteasy >= 3.9.0.CR1, < 3.15.3.1 3.15.3.1
Maven io.quarkus:quarkus-resteasy < 3.8.6.1 3.8.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError.

References

External links from the advisory. They lead to third-party sites.