io.quarkus/quarkus-resteasy vulnerabilities
CVEs whose affected-version data names the io.quarkus/quarkus-resteasy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2023-5675Medium· 6.5Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.
A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these m…
▾ SunlitRed Hat · quarkus-resteasy-reactiveEPSS 0.46%via CVEORG
CVE-2023-6267High· 8.6Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and app…
▾ TwilightRed Hat · io.quarkus/quarkus-resteasyEPSS 0.72%via CVEORG