Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jboss.resteasy:resteasy-bom

5 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5
Registry
Maven Central

Advisories 5

  • A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly…

    Affected: through 4.6.0.Final.

  • A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes.

    Affected: fixed in 4.5.6.Final.

  • A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly…

    Affected: fixed in 3.11.1.Final; from 4.0.0, fixed in 4.5.3.Final.

  • A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided.

    Affected: fixed in 2.0-beta-2.

  • JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially…

    Affected: fixed in 3.1.2.Final.