io.quarkus:quarkus-rest (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.quarkus:quarkus-rest, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-1247 — CVSS 8.3 (high): A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection…
• CVE-2025-66560 — CVSS 5.9 (medium): Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. Prior to versions 3.31.0, 3.27.2, and 3.20.5, a…