io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.alpha3), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.0.0.alpha3) +9 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.0.0.alpha3)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.16.0.cr1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.16.0.cr1) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.16.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.16.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkus:quarkus-jaxrs-client-deployment (1.11.7.final), io.quarkus:quarkus-resteasy-reactive-deployment (1.11.7.final) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.11.7.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.11.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.quarkiverse.jef:quarkus-java-embedded-framework-deployment (0.0.1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.12.0.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.12.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive (2.0.0.cr1), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.cr1) +23 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.0.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.0.0.cr1 -...

io.quarkus:quarkus-jaxrs-client (1.11.0.beta2), io.quarkus:quarkus-jaxrs-client-deployment (1.11.0.beta2) +11 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (1.11.0.beta2)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client 1.11.0.beta2 -...

io.quarkus:quarkus-csrf-reactive (2.13.8.final), io.quarkus:quarkus-csrf-reactive-deployment (2.13.8.final) +47 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.13.8.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-csrf-reactive 2.13.8.final -...

io.quarkus:quarkus-jaxrs-client (1.11.3.final), io.quarkus:quarkus-jaxrs-client-deployment (1.11.3.final) +11 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (1.11.3.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 1.11.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client 1.11.3.final -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.1.4.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.1.4.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.1.4.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

GHSA-MV64-86G8-CQQ7 Quarkus: security checks in resteasy reactive may trigger a denial of service

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (1.13.3.final), io.quarkus:quarkus-rest-client-reactive-deployment (1.13.3.final) +7 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.13.3.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-csrf-reactive-deployment (2.15.0.cr1), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.15.0.cr1) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.15.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.15.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.quarkiverse.renarde:quarkus-renarde (1.0.1), io.quarkiverse.renarde:quarkus-renarde-backoffice (1.0.1) +54 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.9.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkiverse.renarde:quarkus-renarde 1.0.1 -...

com.abavilla:fpi-bot-api (>=1.0.2, <=1.1.0), com.abavilla:fpi-bot-api-core (>=1.0.2, <=1.1.0) +74 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.12.3.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.12.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - com.abavilla:fpi-bot-api =1.0.2, =1.0.2, =1.0.2, =1.0.132, =v1.3.1...

GHSA-25W4-HFQG-4R52 Quarkus: authorization flaw in quarkus resteasy reactive and classic

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either...

io.quarkus:quarkus-csrf-reactive-deployment (2.16.5.final), io.quarkus:quarkus-hibernate-reactive-rest-data-panache-deployment (2.16.5.final) +22 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.16.5.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.16.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-csrf-reactive-deployment...

io.automatiko.quarkus:automatiko-operator-deployment (0.15.0), io.automatiko.quarkus:automatiko-service-deployment (0.15.0) +24 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.8.1.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

com.mobiera.libs:aircast-api-javax (>=1.0, <=1.3), io.quarkus:quarkus-jaxrs-client (1.13.0.final) +14 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (1.13.0.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 1.13.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - com.mobiera.libs:aircast-api-javax =1.0, =1.3 -...

io.quarkus:quarkus-jaxrs-client-deployment (1.11.0.beta2), io.quarkus:quarkus-resteasy-reactive-deployment (1.11.0.beta2) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.11.0.beta2)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.quarkus:quarkus-jaxrs-client-reactive (2.1.0.cr1), io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.1.0.cr1) +25 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.1.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-jaxrs-client-reactive 2.1.0.cr1 -...