org.jboss.resteasy:resteasy-jaxrs-war (2.3.5.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.5.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.5.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.5.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.6.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.2-rc-1) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2-rc-1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2-rc-1 Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.0.0.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.0.0.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.0.0.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.1.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.1.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.2.1.ga) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.2.1.ga)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.2.1.ga Source cves: CVE-2018-1051...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.7.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.7.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.7.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.7.final -...

Moderate: Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update

A minor version update from 7.8 to 7.9 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

Improper Input Validation

resteasy-jaxrs is vulnerble to improper input validation. The attack exists because it does not properly handle the response headers in MediaTypeHeaderDelegate.java, leading to a return of an illegal header to be integrated in the server's response...

Cross-site Scripting (XSS)

resteasy-jaxrs is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization of the value of strVal, allowing RESTEASY003870 exceptions be used to execute arbitrary Javascript in a user's browser...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=2.0.2) +231 more potentially affected by CVE-2017-7561 via org.jboss.resteasy:resteasy-jaxrs (3.1.4.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 3.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - ca.ibodrov.concord:testcontainers-concord =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.6.final...

Cache Poisoning

resteasy-jaxrs is vulnerable to cache poisoning. The library does not add HTTP VARY: Origin headers to it’s responses, causing inaccurate caching when re-used across-origins...