A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade javassist-javadocUpgrade bea-stax-apiUpgrade python3-nssUpgrade python-nss-docUpgrade javassistUpgrade xerces-j2Upgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-coreUpgrade apache-commons-netUpgrade apache-commons-collectionsUpgrade xalan-j2Upgrade glassfish-jaxb-txw2Upgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade jackson-databindUpgrade resteasyUpgrade slf4jUpgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade stax-exUpgrade velocityUpgrade pki-servlet-engineUpgrade jackson-coreUpgrade apache-commons-langUpgrade xsomUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-apisUpgrade jackson-annotations | May 4, 2022 | May 19, 2020 |
| Centos_linux | — | Upgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade ldapjdk-javadocUpgrade slf4jUpgrade javassist-javadocUpgrade pki-base-javaUpgrade relaxngDatatypeUpgrade pki-symkey-debuginfoUpgrade xsomUpgrade python-nss-docUpgrade jackson-module-jaxb-annotationsUpgrade pki-symkeyUpgrade xalan-j2Upgrade python-nss-debugsourceUpgrade pki-kraUpgrade pki-serverUpgrade jackson-annotationsUpgrade javassistUpgrade pki-servlet-4.0-apiUpgrade pki-toolsUpgrade jss-debugsourceUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade pki-acmeUpgrade jssUpgrade jakarta-commons-httpclientUpgrade apache-commons-netUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-apiUpgrade jss-javadocUpgrade stax-exUpgrade velocityUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade tomcatjssUpgrade python3-pkiUpgrade xmlstreambufferUpgrade pki-baseUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade bea-stax-apiUpgrade python3-nssUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade apache-commons-langUpgrade jackson-jaxrs-providersUpgrade jackson-databindUpgrade xml-commons-apisUpgrade pki-core-debugsourceUpgrade resteasyUpgrade pki-servlet-engineUpgrade jackson-coreUpgrade pki-core-debuginfo | Jun 1, 2021 | May 19, 2020 |
| Debian | — | Upgrade resteasy3.0 | Jul 30, 2024 | May 19, 2020 |
| Oracle_linux | — | Upgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade glassfish-fastinfosetUpgrade resteasyUpgrade tomcatjssUpgrade jackson-coreUpgrade python3-nssUpgrade xmlstreambufferUpgrade xml-commons-apisUpgrade stax-exUpgrade pki-servlet-engineUpgrade apache-commons-langUpgrade velocityUpgrade glassfish-jaxb-coreUpgrade xerces-j2Upgrade slf4j-jdk14Upgrade python3-pkiUpgrade jackson-databindUpgrade jss-javadocUpgrade ldapjdkUpgrade pki-baseUpgrade jackson-jaxrs-json-providerUpgrade ldapjdk-javadocUpgrade python-nss-docUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade javassist-javadocUpgrade pki-acmeUpgrade pki-symkeyUpgrade jssUpgrade pki-kraUpgrade pki-toolsUpgrade jackson-annotationsUpgrade slf4jUpgrade pki-caUpgrade apache-commons-netUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade relaxngDatatypeUpgrade xalan-j2Upgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade pki-base-java | Jul 22, 2024 | Apr 15, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 15, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | May 19, 2020 |
| Redhat_linux | — | Upgrade jss-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade pki-kraUpgrade xsomUpgrade python-nss-debugsourceUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade jss-debugsourceUpgrade pki-caUpgrade slf4jUpgrade pki-servlet-4.0-apiUpgrade pki-symkeyUpgrade pki-acmeUpgrade pki-baseUpgrade jssUpgrade xml-commons-resolverUpgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade python3-nss-debuginfoUpgrade jackson-jaxrs-json-providerNo solution existsUpgrade python3-nssUpgrade jackson-coreUpgrade python-nss-docUpgrade pki-toolsUpgrade apache-commons-collectionsUpgrade xmlstreambufferUpgrade resteasyUpgrade xml-commons-apisUpgrade glassfish-jaxb-coreUpgrade jackson-annotationsUpgrade javassistUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade relaxngDatatypeUpgrade stax-exUpgrade apache-commons-langUpgrade apache-commons-netUpgrade jss-javadocUpgrade pki-tools-debuginfoUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade javassist-javadocUpgrade velocityUpgrade xalan-j2Upgrade tomcatjssUpgrade pki-serverUpgrade jakarta-commons-httpclientUpgrade xerces-j2Upgrade bea-stax-apiUpgrade pki-base-javaUpgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade ldapjdkUpgrade jackson-module-jaxb-annotations | May 21, 2021 | May 19, 2020 |
| Rocky_linux | — | Upgrade jss-debuginfoUpgrade jss-javadocUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade jssUpgrade python3-nss | Mar 12, 2024 | May 19, 2020 |
| Ubuntu | — | Upgrade libresteasy3.0-java (Ubuntu Pro)Upgrade libresteasy-java (Ubuntu Pro)Upgrade libresteasy-javaUpgrade libresteasy3.0-java | Mar 14, 2025 | May 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub