CVE-2022-2466: Quarkus

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

Affected products

• Quarkus Quarkus: from 2.10.0, before 2.10.4 (fixed in 2.10.4)

Published 2022-08-31. Last modified 2026-06-17.