title: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9.SP1 release and security update
description: quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. quarkus: json payload getting processed prior to security checks when rest resources  are used with annotations.
cpes: cpe:/a:redhat:quarkus:3.2::el8