Threats tagged 'brew-kaskade-cve-2025-33042'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.7%	CVE-2025-33042Red Hat Security Advisory: Red Hat build of Quarkus 3.20.6 release and security update High7.3EPSS 0.7%2026-04-14GCVE DatabaseCVE-2025-33042 This release of Red Hat build of Quarkus 3.20.6 includes the following CVE fixes: * netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values [quarkus-3.20] (CVE-2026-33870) * netty-codec-http2: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood [quarkus-3.20] (CVE-2026-33871) * plexus-utils: Plexus-utils: Directory Traversal in extractFile method [quarkus-3.20] (CVE-2025-67030) * avro: Apache Avro Java SDK: Code injection on Java generated code [quarkus-3.20] (CVE-2025-33042) * vertx-core: static handler component cache can be manipulated to deny the access to static files [quarkus-3.20] (CVE-2026-1002) For more information, see the release notes page listed in the References section. EPSS 0.7%Report on CVE-2025-33042 Vulnerability Red Hat Product Security CWE-94 #brew-kaskade-cve-2025-33042 #homebrew	GCVE Database	2026-04-14

Page 1 of 1 · 1 duplicate CVE record merged