io.quarkus:quarkus-csrf-reactive-deployment (2.15.2.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.15.2.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.15.2.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.15.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

com.github.mcollovati:quarkus-hilla (1.3.0), com.github.mcollovati:quarkus-hilla-deployment (1.3.0) +85 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.16.12.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.16.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - com.github.mcollovati:quarkus-hilla 1.3.0 -...

io.quarkiverse.googlecloudservices:quarkus-google-cloud-services-main-it (>=1.1.0, <=1.1.1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache (2.9.0.final) +57 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.9.0.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: -...

com.abavilla:fpi-bot-api (>=1.0.2, <=1.1.0), com.abavilla:fpi-bot-api-core (>=1.0.2, <=1.1.0) +82 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.12.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.12.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - com.abavilla:fpi-bot-api =1.0.2, =1.0.2, =1.0.2, =1.0.132,...

io.github.redhat-appstudio.jvmbuild:hacbs-build-request-processor (>=0.6, <=0.7), io.github.redhat-appstudio.jvmbuild:hacbs-cache (>=0.6, <=0.7) +81 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.16.4.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.16.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: -...

GHSA-MV64-86G8-CQQ7 Quarkus: security checks in resteasy reactive may trigger a denial of service

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.1.2.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.1.2.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.1.2.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.14.0.cr1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.14.0.cr1) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.14.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.14.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkus:quarkus-jaxrs-client (1.11.0.cr1), io.quarkus:quarkus-jaxrs-client-deployment (1.11.0.cr1) +11 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (1.11.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 1.11.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client 1.11.0.cr1 -...

io.quarkus:quarkus-jaxrs-client-reactive (2.1.0.final), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.1.0.final) +26 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.1.0.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.1.0.final -...

io.automatiko.addons:automatiko-files-filesystem-addon (0.19.0), io.automatiko.addons:automatiko-files-google-storage-addon (0.19.0) +55 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.12.2.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.12.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.automatiko.addons:automatiko-files-filesystem-addon 0.19.0 -...

io.quarkus:quarkus-jaxrs-client-reactive (2.0.0.cr2), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.cr2) +23 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.0.0.cr2)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.0.0.cr2 -...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.7.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.7.3.final) +51 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.7.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkiverse.hibernatesearchextras:quarkus-hibernate-search-extras-docs (1.0.1), io.quarkiverse.hibernatesearchextras:quarkus-hibernate-search-orm-elasticsearch-aws-deployment (1.0.1) +47 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.6.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: -...

io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.10.3.final), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.10.3.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.10.3.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.10.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.11.5.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.11.5.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.11.5.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.11.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus:quarkus-csrf-reactive-deployment (2.13.8.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.13.8.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.13.8.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

com.abavilla:fpi-framework-core (1.6.3), com.abavilla:fpi-framework-pom (1.6.3) +61 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.16.3.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.16.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - com.abavilla:fpi-framework-core 1.6.3 -...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.1.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.13.1.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0-alpha1, <=1.0.0-beta2), io.quarkiverse.renarde:quarkus-renarde-backoffice-deployment (1.0.5) +27 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.16.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.16.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - com.github.mcollovati:quarkus-hilla-deployme...