https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:46:46.822378+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02827 bdu:2022-02827 2026-10-03T23:46:47.426357+00:00 bdu:2022-02827 https://cve.radiocsirt.org/vuln/euvd-2026-21643 EUVD-2026-21643 2026-10-03T23:46:47.426444+00:00 EUVD-2026-21643 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20289 fkie_cve-2021-20289 2026-10-03T23:46:47.426461+00:00

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-244r-fcj3-ghjq GHSA-244r-fcj3-ghjq — Exposure of class information in RESTEasy 2026-10-03T23:46:47.426497+00:00

Affected: Maven: org.jboss.resteasy:resteasy-core

A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2021-20289 gsd-2021-20289 2026-10-03T23:46:47.426529+00:00 gsd-2021-20289 https://cve.radiocsirt.org/vuln/oesa-2021-1171 OESA-2021-1171 — resteasy security update 2026-10-03T23:46:47.426541+00:00

Affected: openEuler:20.03-LTS-SP1: resteasy

%global desc \ RESTEasy contains a JBoss project that provides frameworks to help\ build RESTful Web Services and RESTful Java applications. It is a fully\ certified and portable implementation of the JAX-RS specification. %{desc} %global extdesc %{desc}\ \ This package contains Security Fix(es): A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-20289)

 https://cve.radiocsirt.org/vuln/rhsa-2021:3700 RHSA-2021:3700 — Red Hat Security Advisory: Red Hat AMQ Broker 7.9.0 release and security update 2026-10-03T23:46:47.426565+00:00

apache-httpclient: incorrect handling of malformed authority component in request URIs jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS Broker: discloses JDBC username and password in the application log file 7: Incorrect privilege in Management Console resteasy: Error message exposes endpoint class information netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header jetty: Symlink directory exposes webapp directory contents jetty: Ambiguous paths can access WEB-INF jetty: Resource exhaustion when receiving an invalid large TLS frame jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 jetty: SessionListener can prevent a session from being invalidated breaking logout jetty: crafted URIs allow bypassing security constraints

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20289 UBUNTU-CVE-2021-20289 2026-10-03T23:46:47.426625+00:00

Affected: Ubuntu:Pro:16.04:LTS: resteasy, Ubuntu:Pro:18.04:LTS: resteasy3.0, Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:20.04:LTS: resteasy3.0, Ubuntu:22.04:LTS: resteasy3.0, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:24.04:LTS: resteasy3.0, Ubuntu:Pro:24.04:LTS: resteasy, Ubuntu:25.10: resteasy, Ubuntu:25.10: resteasy3.0 and 2 more

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1366 WID-SEC-W-2022-1366 — Red Hat Integration - Service Registry: Mehrere Schwachstellen 2026-10-03T23:46:47.426668+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration - Service Registry ausnutzen, um Informationen offenzulegen und einen Cross Site Scripting Angriff durchzuführen.