The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slf4j-jdk14Upgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-providersUpgrade velocityUpgrade jackson-annotationsUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-engineUpgrade apache-commons-langUpgrade stax-exUpgrade resteasyUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade xsomUpgrade xml-commons-apisUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade slf4jUpgrade python3-nssUpgrade pki-servlet-4.0-apiUpgrade javassist-javadocUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade apache-commons-netUpgrade javassistUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade xalan-j2Upgrade jakarta-commons-httpclientUpgrade xml-commons-resolver | May 4, 2022 | May 19, 2020 |
| Centos_linux | — | Upgrade jakarta-commons-httpclientUpgrade pki-kraUpgrade pki-toolsUpgrade pki-servlet-4.0-apiUpgrade pki-caUpgrade pki-acmeUpgrade apache-commons-netUpgrade jackson-annotationsUpgrade pki-serverUpgrade jss-debuginfoUpgrade apache-commons-collectionsUpgrade slf4jUpgrade python3-nss-debuginfoUpgrade xsomUpgrade ldapjdk-javadocUpgrade relaxngDatatypeUpgrade xalan-j2Upgrade python-nss-docUpgrade pki-symkey-debuginfoUpgrade pki-symkeyUpgrade javassistUpgrade javassist-javadocUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jssUpgrade pki-base-javaUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade jackson-databindUpgrade xerces-j2Upgrade slf4j-jdk14Upgrade xmlstreambufferUpgrade resteasyUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade xml-commons-apisUpgrade apache-commons-langUpgrade jackson-jaxrs-providersUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-apiUpgrade stax-exUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade pki-baseUpgrade jackson-jaxrs-json-providerUpgrade bea-stax-apiUpgrade jackson-coreUpgrade velocityUpgrade pki-tools-debuginfoUpgrade ldapjdk | Jun 1, 2021 | May 19, 2020 |
| Debian | — | Upgrade resteasy3.0 | Jul 30, 2024 | May 19, 2020 |
| Oracle_linux | — | Upgrade pki-acmeUpgrade javassistUpgrade jackson-annotationsUpgrade jssUpgrade apache-commons-netUpgrade pki-caUpgrade slf4jUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade xsomUpgrade xalan-j2Upgrade javassist-javadocUpgrade pki-serverUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade pki-kraUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade pki-servlet-4.0-apiUpgrade pki-base-javaUpgrade relaxngDatatypeUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade xerces-j2Upgrade jackson-databindUpgrade slf4j-jdk14Upgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-providersUpgrade glassfish-fastinfosetUpgrade resteasyUpgrade glassfish-jaxb-txw2Upgrade pki-baseUpgrade bea-stax-apiUpgrade ldapjdkUpgrade tomcatjssUpgrade jackson-coreUpgrade xml-commons-apisUpgrade python3-nssUpgrade xml-commons-resolverUpgrade stax-exUpgrade velocityUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade apache-commons-langUpgrade xmlstreambuffer | Jul 22, 2024 | Apr 15, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 15, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | May 19, 2020 |
| Redhat_linux | — | Upgrade bea-stax-apiUpgrade ldapjdkUpgrade javassistUpgrade jackson-annotationsUpgrade pki-symkey-debuginfoUpgrade apache-commons-langUpgrade pki-servlet-engineUpgrade glassfish-jaxb-txw2Upgrade ldapjdk-javadocUpgrade python3-pkiUpgrade tomcatjssUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade xmlstreambufferUpgrade pki-base-javaUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade xalan-j2Upgrade relaxngDatatypeUpgrade resteasyUpgrade stax-exUpgrade jss-javadocUpgrade apache-commons-netUpgrade xerces-j2Upgrade xml-commons-apisUpgrade pki-serverUpgrade javassist-javadocUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-apiUpgrade pki-tools-debuginfoUpgrade pki-core-debuginfoUpgrade jss-debuginfoUpgrade jackson-jaxrs-providersUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade python-nss-debugsourceUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade pki-acmeUpgrade python-nss-docUpgrade pki-caUpgrade slf4jUpgrade jackson-coreUpgrade pki-symkeyUpgrade python3-nssUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade pki-baseUpgrade jssUpgrade xml-commons-resolverUpgrade apache-commons-collectionsUpgrade xsomUpgrade pki-kraNo solution existsUpgrade pki-tools | May 21, 2021 | May 19, 2020 |
| Rocky_linux | — | Upgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade jss-debuginfoUpgrade jss-javadocUpgrade python3-nssUpgrade jssUpgrade python-nss-debugsourceUpgrade python-nss-doc | Mar 12, 2024 | May 19, 2020 |
| Ubuntu | — | Upgrade libresteasy3.0-javaUpgrade libresteasy-javaUpgrade libresteasy3.0-java (Ubuntu Pro)Upgrade libresteasy-java (Ubuntu Pro) | Mar 14, 2025 | May 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub