https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:48:00.868001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03002 cnvd-2018-03002 2026-10-18T06:48:00.871167+00:00 cnvd-2018-03002 https://cve.radiocsirt.org/vuln/euvd-2026-60973 EUVD-2026-60973 2026-10-18T06:48:00.871195+00:00 EUVD-2026-60973 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1051 fkie_cve-2018-1051 2026-10-18T06:48:00.871210+00:00

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

 https://cve.radiocsirt.org/vuln/ghsa-m2fv-3rqm-g7p5 GHSA-m2fv-3rqm-g7p5 — Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider 2026-10-18T06:48:00.871235+00:00

Affected: Maven: org.jboss.resteasy:resteasy-yaml-provider

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

#### Mitigation: If the YamlProvider is enabled it's recommended to add authentication, and authorization to the endpoint expecting Yaml content to prevent exploitation of this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2018-1051 gsd-2018-1051 2026-10-18T06:48:00.871262+00:00 gsd-2018-1051 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1051 UBUNTU-CVE-2018-1051 2026-10-18T06:48:00.871274+00:00

Affected: Ubuntu:Pro:16.04:LTS: resteasy

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.