Red Hat Security Advisory: Red Hat build of Quarkus 2.13.9.SP1 release and security update
quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. quarkus: json payload getting processed prior to security checks when rest resources  are used with annotations.
cpe:/a:redhat:quarkus:2.13::el8