← All credits

Red Hat would like to thank Yu Bao (PayPal Cyber Security Team) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-89059
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
CVE-2026-89058
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config