RHSA-2025:22195HighCVSS 7.5
Red Hat Security Advisory: Red Hat build of Quarkus 3.20.4 release and security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-64518 — cyclonedx-core-java: CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection
🔗 References (17)
- selfhttps://access.redhat.com/errata/RHSA-2025:22195
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/products/quarkus/
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.20.4
- externalhttps://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20
- externalhttps://issues.redhat.com/browse/QUARKUS-4612
- externalhttps://issues.redhat.com/browse/QUARKUS-6820
- externalhttps://issues.redhat.com/browse/QUARKUS-6821
- externalhttps://issues.redhat.com/browse/QUARKUS-6822
- externalhttps://issues.redhat.com/browse/QUARKUS-6823
- externalhttps://issues.redhat.com/browse/QUARKUS-6824
- externalhttps://issues.redhat.com/browse/QUARKUS-6826
- externalhttps://issues.redhat.com/browse/QUARKUS-6829
- externalhttps://issues.redhat.com/browse/QUARKUS-6830
- externalhttps://issues.redhat.com/browse/QUARKUS-6832
- externalhttps://issues.redhat.com/browse/QUARKUS-6833
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22195.json