Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@1.2.1-10.CP02_patch01
Typemaven
Namespaceorg.jboss.resteasy
Nameresteasy-jaxb-provider
Version1.2.1-10.CP02_patch01
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.3.2
Latest_non_vulnerable_version3.0.9.Final
Affected_by_vulnerabilities
0
url VCID-2rya-81tn-w7hw
vulnerability_id VCID-2rya-81tn-w7hw
summary 
Improper Restriction of XML External Entity Reference
RESTEasy does not disable external entities when the `resteasy.document.expand.entity.references` parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-1011.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-1011.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2014-1039.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-1039.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2014-1040.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-1040.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2014-1298.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-1298.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2015-0125.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0125.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2015-0675.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0675.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2015-0720.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0720.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2015-0765.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0765.html
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3490.json
9
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3490
reference_id
reference_type
scores
0
value 0.04646
scoring_system epss
scoring_elements 0.8948
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3490
10
reference_url https://github.com/resteasy/Resteasy/pull/521
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/resteasy/Resteasy/pull/521
11
reference_url https://github.com/resteasy/Resteasy/pull/533
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/resteasy/Resteasy/pull/533
12
reference_url https://github.com/ronsigal/Resteasy/commit/9b7d0f574cafdcf3bea5428f3145ab4908fc6d83
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ronsigal/Resteasy/commit/9b7d0f574cafdcf3bea5428f3145ab4908fc6d83
13
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1107901
reference_id 1107901
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1107901
15
reference_url https://bugzilla.redhat.com/CVE-2014-3490
reference_id CVE-2014-3490
reference_type
scores
url https://bugzilla.redhat.com/CVE-2014-3490
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-3490
reference_id CVE-2014-3490
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-3490
17
reference_url https://github.com/advisories/GHSA-qjpq-5pq3-43rr
reference_id GHSA-qjpq-5pq3-43rr
reference_type
scores
url https://github.com/advisories/GHSA-qjpq-5pq3-43rr
18
reference_url https://access.redhat.com/errata/RHSA-2014:1011
reference_id RHSA-2014:1011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1011
19
reference_url https://access.redhat.com/errata/RHSA-2014:1039
reference_id RHSA-2014:1039
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1039
20
reference_url https://access.redhat.com/errata/RHSA-2014:1040
reference_id RHSA-2014:1040
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1040
21
reference_url https://access.redhat.com/errata/RHSA-2014:1298
reference_id RHSA-2014:1298
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1298
22
reference_url https://access.redhat.com/errata/RHSA-2014:1904
reference_id RHSA-2014:1904
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1904
23
reference_url https://access.redhat.com/errata/RHSA-2015:0125
reference_id RHSA-2015:0125
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0125
24
reference_url https://access.redhat.com/errata/RHSA-2015:0234
reference_id RHSA-2015:0234
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0234
25
reference_url https://access.redhat.com/errata/RHSA-2015:0235
reference_id RHSA-2015:0235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0235
26
reference_url https://access.redhat.com/errata/RHSA-2015:0675
reference_id RHSA-2015:0675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0675
27
reference_url https://access.redhat.com/errata/RHSA-2015:0720
reference_id RHSA-2015:0720
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0720
28
reference_url https://access.redhat.com/errata/RHSA-2015:0765
reference_id RHSA-2015:0765
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0765
29
reference_url https://access.redhat.com/errata/RHSA-2015:1009
reference_id RHSA-2015:1009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1009
fixed_packages
0
url pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@3.0.9.Final
purl pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@3.0.9.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@3.0.9.Final
aliases CVE-2014-3490, GHSA-qjpq-5pq3-43rr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2rya-81tn-w7hw
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@1.2.1-10.CP02_patch01