Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

io.quarkus:quarkus-resteasy

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 7.5MavenPublished

    io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

    CVE-2025-1634 · GHSA-4fwr-mh5q-hchh

    Affected
    • Maven io.quarkus:quarkus-resteasy >= 3.16.0.CR1, < 3.19.1; >= 3.9.0.CR1, < 3.15.3.1; < 3.8.6.1
    Fixed in
    3.8.6.13.15.3.13.19.1· Vendor fix available
    Issue
    A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError.

    Recommended action: Upgrade to 3.19.1, 3.15.3.1 or 3.8.6.1 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →