Skip to content
Threat Feed
Subscribe

Product

Quarkus REST Data Panache

1 brief RSS
critical advisory

Security Control Bypass in Quarkus REST Data Panache via @MethodProperties

A code generation flaw in Quarkus REST Data Panache allows unauthenticated attackers to bypass class-level security requirements when using @MethodProperties without explicit role re-declaration.

Quarkus REST Data Panache web-application-security configuration-flaw cve-2026-87744
1c