GHSA-mwhw-6p27-4crc
Quarkus does not terminate HTTP requests header context
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.quarkus:quarkus-core-parent | >= 2.10.0, < 2.10.4 | 2.10.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior. This issue was fixed in version 2.10.4Final.
References
External links from the advisory. They lead to third-party sites.