# org.jboss.resteasy:resteasy-bom (Maven) vulnerabilities 5 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://central.sonatype.com/artifact/org.jboss.resteasy/resteasy-bom ## Advisories (5) ### [CVE-2021-20293](https://cve.now/CVE-2021-20293): A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly… - Severity: Unrated - Published: Jun 10, 2021 - Affected: through 4.6.0.Final. ### [CVE-2020-14326](https://cve.now/CVE-2020-14326): A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. - Severity: Unrated - Published: Jun 2, 2021 - Affected: fixed in 4.5.6.Final. ### [CVE-2020-10688](https://cve.now/CVE-2020-10688): A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly… - Severity: Unrated - Published: May 27, 2021 - Affected: fixed in 3.11.1.Final; from 4.0.0, fixed in 4.5.3.Final. ### [CVE-2020-25724](https://cve.now/CVE-2020-25724): A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. - Severity: Unrated - Published: May 26, 2021 - Affected: fixed in 2.0-beta-2. ### [CVE-2016-9606](https://cve.now/CVE-2016-9606): JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially… - Severity: Unrated - Published: Mar 9, 2018 - Affected: fixed in 3.1.2.Final. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.jboss.resteasy:resteasy-bom Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.