at.meks.quarkiverse.axonframework-extension:quarkus-axon-jpa-eventstore-deployment (>=0.1.0-quarkus-3.15-rc3, <=0.1.0-quarkus-3.15-rc4), br.com.labbs:quarkus-monitor-reactive-deployment (>=2.0.0, <=3.15.4) +244 more potentially affected by CVE-2025-1247 via io.quarkus.resteasy.reactive:resteasy-reactive-common-processor (>=3.0.0.alpha1, <=3.15.3)

io.quarkus.resteasy.reactive:resteasy-reactive-common-processor MAVEN version =3.0.0.alpha1, =0.1.0-quarkus-3.15-rc3, =2.0.0, =1.6.11, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =2.4.1, =2.0.0-alpha1, =2.4.1, =1.0.0, =2.1.0 and more Source cves...

at.meks.quarkiverse.axonframework-extension:quarkus-axon-jpa-eventstore-deployment (>=0.1.0-rc3, <=0.1.0-rc9), at.meks.quarkiverse.axonframework-extension:quarkus-axon-sagastore-jpa-deployment (>=0.1.0-rc6, <=0.1.0-rc9) +92 more potentially affected by CVE-2025-1247 via io.quarkus.resteasy.reactive:resteasy-reactive-common-processor (>=3.16.0.cr1, <=3.18.1)

io.quarkus.resteasy.reactive:resteasy-reactive-common-processor MAVEN version =3.16.0.cr1, =0.1.0-rc3, =0.1.0-rc6, =0.1.0-rc5, =24.5.0-beta1, =24.5.0-beta1, =24.5.0-beta1, =0.1.4, =0.1.4, =0.38.0, =0.38.0, =3.0.2.final, =3.0.2.final, =3.1.3.final - io.debezium:debe...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the shared instance used in field injection without a CDI scope. An attacker can manipulate request data, impersonate users, or access sensitive information by exploiting the leakage of...

org.jboss.resteasy:resteasy-jaxrs-war (2.2-beta-1) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.2-beta-1)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2-beta-1 Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0.1.ga) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.0.1.ga)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0.1.ga Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0-rc1) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.0-rc1)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0-rc1 Source cves:...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=6.8.0), com.aeontronix.enhanced-mule:enhanced-mule-tools-cli (>=2.0.0-alpha2, <=2.0.0-alpha4) +117 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=5.0.0.alpha1, <=5.0.5.final)

org.jboss.resteasy:resteasy-core MAVEN version =5.0.0.alpha1, =5.7.7, =2.0.0-alpha2, =2.0.0-alpha2, =2.0.0-alpha2, =1.14.0, =2.35.0, =2.35.0, =0.15.3, =0.15.3, =0.15.3, =0.15.3, =0.27.1, =0.31.0 and more Source cves: CVE-2023-0482 Source advisory: GHSA-2C6G-PFX3-W7H8...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=0.8.41), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=0.8.41) +1863 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=4.0.0.beta6, <=4.7.7.final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.beta6, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =2.0.0, =0.1.5, =0.1.5, =1.0.0-alpha1, =0.0.1, =1.8.0, =0.5.8, =0.5.9 and more Source cves: CVE-2023-0482 Source advisory: OSV:GHSA-2C6G-PFX3-W7H8http...

org.jboss.resteasy:resteasy-jaxrs-war (2.1.0.ga), org.zanata:zanata-adapter-glossary (>=1.8.0, <=2.1.1) +10 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.1.0.ga)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.1.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.1.0.ga -...

org.jboss.resteasy:resteasy-jaxrs-war (2.0.0.ga) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.0.0.ga)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0.0.ga Source cves:...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=0.9.39), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=0.9.39) +686 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=6.0.0.beta1, <=6.2.2.final)

org.jboss.resteasy:resteasy-core MAVEN version =6.0.0.beta1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.0.0, =3.0, =3.1 - co...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=6.8.0), com.aeontronix.enhanced-mule:enhanced-mule-tools-cli (>=2.0.0-alpha2, <=2.0.0-alpha4) +117 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=5.0.0.alpha1, <=5.0.5.final)

org.jboss.resteasy:resteasy-core MAVEN version =5.0.0.alpha1, =5.7.7, =2.0.0-alpha2, =2.0.0-alpha2, =2.0.0-alpha2, =1.14.0, =2.35.0, =2.35.0, =0.15.3, =0.15.3, =0.15.3, =0.15.3, =0.27.1, =0.31.0 and more Source cves: CVE-2023-0482 Source advisory: OSV:GHSA-2C6G-PFX3-W7H8...

Insecure Temporary File in RESTEasy

Impact In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user. Patches Fixed in the following pull requests:...

org.jboss.resteasy:resteasy-jaxrs-war (2.1-beta-1) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.1-beta-1)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.1-beta-1 Source cves:...

GHSA-2C6G-PFX3-W7H8 Insecure Temporary File in RESTEasy

Impact In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user. Patches Fixed in the following pull requests:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0-beta-4) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.0-beta-4)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0-beta-4 Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0-beta-3) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.0-beta-3)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0-beta-3 Source cves:...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=0.9.39), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=0.9.39) +686 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=6.0.0.beta1, <=6.2.2.final)

org.jboss.resteasy:resteasy-core MAVEN version =6.0.0.beta1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.2.0-alpha1, =1.0.0, =3.0, =3.1 - co...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.4.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.4.final) potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.3.4.final)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.4.final -...

org.jboss.pressgang.ccms.contentspec:builder (>=1.4, <=1.9), org.jboss.pressgang.ccms.contentspec:processor (>=1.4, <=1.9) +21 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-multipart-provider (2.3.3.final)

org.jboss.resteasy:resteasy-multipart-provider MAVEN version 2.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-multipart-provider and may be impacted: - org.jboss.pressgang.ccms.contentspec:builder =1.4, =1.4, =1.4...