CVE-2025-14969
Fixed upstream EPSS <1%CVSS 4.3
A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections.
Products: Red Hat build of Quarkus 3.27.2.redhat, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat OpenShift Dev Spaces
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.hibernate.reactive:hibernate-reactive-core | 4.2.1 |