IBM Enterprise Build of Quarkus versions 3.27.1 to 3.27.4.SP2 and 3.33.1 to 3.33.2.SP2 contain a vulnerability classified as CWE-770 (Allocation of Resources Without Limits or Throttling). This flaw allows a remote attacker to cause a denial of service by sending multipart MIME requests that lead to unbounded accumulation of part-header bytes, exhausting resources. The vulnerability has a CVSS v3.1 base score of 7.5, indicating high severity. No official fix or patch has been documented in the vendor advisory or related sources as of the published date.

The vulnerability can be exploited remotely without authentication to cause a denial of service by exhausting server resources through unbounded accumulation of multipart MIME part-header bytes. This impacts availability but does not affect confidentiality or integrity. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing network-level protections such as rate limiting or filtering multipart MIME requests to mitigate potential denial of service attempts. Monitor vendor communications for updates.