Unauthenticated authorization bypass via path normalization

Authorization bypass in Red Hat build of Quarkus allows remote attackers to access protected endpoints through crafted HTTP URLs. Quarkus HTTP security normalizes a request path differently from its HTTP dispatcher, so the matcher approves a public path that dispatches to a protected route. Exploitation requires an application that uses path-based access controls and exposes a reachable protected endpoint; the reported consequence is unauthorized reading of sensitive information.