Description
It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.
Remediation
References
https://github.com/quarkusio/quarkus/issues/26748
Related Vulnerabilities
CVE-2021-21391 Vulnerability in npm package ckeditor5-engine
CVE-2021-25948 Vulnerability in npm package expand-hash
CVE-2023-34462 Vulnerability in maven package io.netty:netty-handler
CVE-2021-20323 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2020-14967 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign