org.jboss.resteasy:resteasy-jaxrs-war (2.2.3.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.3.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.3.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2.3.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.5.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.5.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.5.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.5.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.6.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.2-rc-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2-rc-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2-rc-1 Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.0.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.0.ga Source cves: CVE-2018-1051...

com.redhat.rhevm.api:rhevm-api (1.0-rc1.3), com.redhat.rhevm.api:rhevm-api-common-jaxrs (1.0-rc1.3) +6 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api 1.0-rc1.3 -...

org.jboss.resteasy:resteasy-jaxrs-war (2.0.0.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0.0.ga Source cves: CVE-2018-1051...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.13), ca.vanzyl.concord:concord-k8s-server (>=0.0.1, <=0.0.10) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.1.0.final, <=3.6.0.cr1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.1.0.final, =0.0.2, =0.0.1, =0.0.8, =1.18.0, =1.38.0, =1.44.0, =1.37.0, =1.44.0, =1.0.0, =1.18.0, =1.0.0, =1.0.0, =0.0.27, =0.0.11, =0.0.27, =0.0.31 and more Source cves: CVE-2018-1051 Source advisory: OSV:GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3-beta-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3-beta-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3-beta-1 Source cves:...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.13), ca.vanzyl.concord:concord-k8s-server (>=0.0.1, <=0.0.10) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.1.0.final, <=3.6.0.cr1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.1.0.final, =0.0.2, =0.0.1, =0.0.8, =1.18.0, =1.38.0, =1.44.0, =1.37.0, =1.44.0, =1.0.0, =1.18.0, =1.0.0, =1.0.0, =0.0.27, =0.0.11, =0.0.27, =0.0.31 and more Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in YamlProvider. Mitigation: If the YamlProvider is enabled it's recommended to add authentication, and authorization to the endpoint expectin...

com.redhat.rhevm.api:rhevm-api (>=0.9-milestone2.1, <=0.9-milestone8.2), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone2.1, <=0.9-milestone6.6) +19 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - com.redhat.rhevm.api:rhevm-api =0.9-milestone2.1, =0.9-milestone2.1,...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.2.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.2.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.2.final Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.0-beta-3) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0-beta-3)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0-beta-3 Source cves:...

org.jboss.resteasy:resteasy-jaxrs-war (2.1-beta-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.1-beta-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.1-beta-1 Source cves:...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: OSV:GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.1.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.1.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.2.1.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2.1.ga Source cves: CVE-2018-1051...

io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.0.1.final)

io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...