Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jboss.resteasy:resteasy-jaxrs

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS…

    Affected: from 3.0.7.Final, fixed in 3.0.25.Final; from 3.1.4.Final, fixed in 3.5.0.CR1.

  • RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

    Affected: fixed in 3.0.20.Final.

  • DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities…

    Affected: fixed in 3.0.11.Final.