VulnerableCode Package Details - pkg:maven/org.jboss.resteasy/resteasy-client@3.0.20

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.jboss.resteasy/resteasy-client@3.0.20

purl	pkg:maven/org.jboss.resteasy/resteasy-client@3.0.20
Tags	Ghost

Next non-vulnerable version	3.14.0.Final
Latest non-vulnerable version	4.7.0.Final
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-7uh1-a5ng-rqch Aliases: CVE-2016-6348 GHSA-9xfc-j5mf-9w5p	JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.	3.1.0.Final Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-03T21:26:09.036769+00:00	GitLab Importer	Affected by	VCID-7uh1-a5ng-rqch	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jboss.resteasy/resteasy-client/CVE-2016-6348.yml	38.1.0