Search for packages
| purl | pkg:deb/debian/resteasy3.0@3.0.26-2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qktn-umfn-dkhv
Aliases: CVE-2020-10688 GHSA-29qj-rvv6-qrmv |
Cross-site scripting in RESTEasy A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-aedf-8vvz-37cp | Improper Input Validation in RESTEasy A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed. |
CVE-2020-1695
GHSA-63cq-ppq8-cw6g |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T13:02:15.014706+00:00 | Debian Importer | Affected by | VCID-qktn-umfn-dkhv | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T01:05:44.280618+00:00 | Debian Oval Importer | Fixing | VCID-aedf-8vvz-37cp | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.4.0 |
| 2026-04-13T08:57:41.638284+00:00 | Debian Importer | Affected by | VCID-qktn-umfn-dkhv | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-12T00:37:44.640311+00:00 | Debian Oval Importer | Fixing | VCID-aedf-8vvz-37cp | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.3.0 |
| 2026-04-09T00:07:44.081878+00:00 | Debian Oval Importer | Fixing | VCID-aedf-8vvz-37cp | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.1.0 |
| 2026-04-08T19:57:50.838408+00:00 | Debian Importer | Affected by | VCID-qktn-umfn-dkhv | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |