CGA-9vf2-8c9q-q94f

apicurio-registry, depends on 'quarkus', which in turn depends on 'quarkus-http', affected by this CVE. This is addressed in 'quarkus-http' v5.3.4, but the 'quarkus' version used by this project, depends on 'quarkus-http v5.3.2'. Attempts to upgrade quarkus resulted in build errors. The project has noted caveats when bumping quarkus in the code base. Waiting for upstream to address in a future release.

• https://github.com/quarkusio/quarkus/blob/a98a3f91fc06c959672b67ece75516bb59b994cd/bom/application/pom.xml#L38
• https://github.com/Apicurio/apicurio-registry/blob/779f0994a1de5ebd48f617f476f3e3b7c5a36e48/pom.xml#L147
• https://github.com/quarkusio/quarkus-http