It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.
{
"cwe_ids": [
"CWE-444"
],
"cna_assigner": "redhat",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2466.json"
}{
"source": [
"AFFECTED_FIELD",
"CPE_RANGE"
],
"cpe": "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "quarkus 2.10.3"
},
{
"last_affected": "quarkus 2.10.3"
},
{
"introduced": "2.10.0"
},
{
"fixed": "2.10.4"
}
]
}