Threats tagged 'ghsa-wfpc-rccm-rq4m'

CVE-2026-93558 is a denial of service vulnerability caused by unbounded per-connection queue growth in the WebSocketServerExtensionHandler component. This flaw allows an attacker to exhaust server resources by causing excessive queue buildup for WebSocket connections, leading to service disruption. The vulnerability has a CVSS score of 7.5 (high severity). A security update addressing this issue is included in Red Hat build of Quarkus 3.33.3.SP2.