Search for packages
| purl | pkg:rpm/redhat/eap7-resteasy@3.15.5-1.Final_redhat_00001.1?arch=el9eap |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4s4f-emvn-9bhh
Aliases: CVE-2022-45787 GHSA-q84x-3476-8ff2 |
Apache James MIME4J vulnerable to information disclosure to local users Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later. | There are no reported fixed by versions. |
|
VCID-etyq-9yys-tkdf
Aliases: CVE-2023-0482 GHSA-2c6g-pfx3-w7h8 GHSA-jrmh-v64j-mjm9 |
Insecure Temporary File in RESTEasy In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user. | There are no reported fixed by versions. |
|
VCID-knw5-d2nn-vyhq
Aliases: CVE-2022-41853 GHSA-77xx-rxvh-q682 |
HyperSQL DataBase vulnerable to remote code execution when processing untrusted input Those using `java.sql.Statement` or `java.sql.PreparedStatement` in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can be prevented by updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be called. For example, `System.setProperty("hsqldb.method_class_names", "abc")` or Java argument `-Dhsqldb.method_class_names="abc"` can be used. From version 2.7.1 all classes by default are not accessible except those in `java.lang.Math` and need to be manually enabled. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:56:48.639772+00:00 | RedHat Importer | Affected by | VCID-knw5-d2nn-vyhq | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41853.json | 38.0.0 |
| 2026-04-01T13:55:53.643440+00:00 | RedHat Importer | Affected by | VCID-4s4f-emvn-9bhh | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-45787.json | 38.0.0 |
| 2026-04-01T13:55:36.697510+00:00 | RedHat Importer | Affected by | VCID-etyq-9yys-tkdf | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0482.json | 38.0.0 |