Login Request a demo
RE
Product
Resteasy
by Redhat · last CVE Feb 17, 2023
18
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 0High 5Medium 9Low 0
Severity
All severities18Critical0High5Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Resteasy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-9606
8.1
6%
Mar 9
JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an…
Affected: through 3.1.1
CVE-2018-1051
8.1
1%
Jan 25
It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider
Affected: 3.0.22; 3.1.2
CVE-2020-14326
7.5
1%
Jun 2
A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes
Affected: 4.2.0 before 4.5.6
CVE-2020-1695
7.5
2%
May 19
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning…
Affected: 3.0.0 before 3.12.0; 4.0.0 before 4.6.0
CVE-2016-6346
7.5
6%
Sep 7
RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors
Affected: All versions, or not specified
Showing 5