The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-resteasy-jackson2-providerUpgrade pki-resteasy-clientUpgrade pki-resteasy-coreUpgrade pki-resteasy-servlet-initializer | Oct 11, 2026 | Sep 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade resteasy-base-javadocUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-tjwsUpgrade resteasy-baseUpgrade resteasy-base-clientUpgrade resteasy-base-providers-pomUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-jaxrsUpgrade resteasy-base-atom-providerUpgrade resteasy-base-resteasy-pomUpgrade resteasy-base-jaxrs-allUpgrade resteasy-base-jaxrs-api | Oct 19, 2026 | Oct 19, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Oct 13, 2026 | Oct 13, 2026 |
| Oracle_linux | — | Upgrade pki-resteasy-servlet-initializerUpgrade pki-resteasy-clientUpgrade pki-resteasy-coreUpgrade pki-resteasy-jackson2-provider | Oct 22, 2026 | Aug 31, 2026 |
| Redhat_linux | — | Upgrade pki-resteasy-servlet-initializerUpgrade pki-resteasy-coreUpgrade pki-resteasy-jackson2-providerNo solution existsUpgrade pki-resteasy-client | Sep 2, 2026 | Aug 31, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub