https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:26:43.026563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09868 bdu:2025-09868 2026-10-02T13:26:43.360263+00:00 bdu:2025-09868 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0791 certfr-2023-avi-0791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T13:26:43.360312+00:00 certfr-2023-avi-0791 https://cve.radiocsirt.org/vuln/euvd-2026-223328 EUVD-2026-223328 2026-10-02T13:26:43.360333+00:00 EUVD-2026-223328 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0482 fkie_cve-2023-0482 2026-10-02T13:26:43.360346+00:00

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

 https://cve.radiocsirt.org/vuln/ghsa-2c6g-pfx3-w7h8 GHSA-2c6g-pfx3-w7h8 — Insecure Temporary File in RESTEasy 2026-10-02T13:26:43.360374+00:00

Affected: Maven: org.jboss.resteasy:resteasy-core, Maven: org.jboss.resteasy:resteasy-multipart-provider

### Impact In RESTEasy the insecure `File.createTempFile()` is used in the `DataSourceProvider`, `FileProvider` and `Mime4JWorkaround` classes which creates temp files with insecure permissions that could be read by a local user.

### Patches Fixed in the following pull requests:

* https://github.com/resteasy/resteasy/pull/3409 (7.0.0.Alpha1) * https://github.com/resteasy/resteasy/pull/3423 (6.2.3.Final) * https://github.com/resteasy/resteasy/pull/3412 (5.0.6.Final) * https://github.com/resteasy/resteasy/pull/3413 (4.7.8.Final) * https://github.com/resteasy/resteasy/pull/3410 (3.15.5.Final)

### Workarounds There is no workaround for this issue.

### References * https://nvd.nist.gov/vuln/detail/CVE-2023-0482 * https://bugzilla.redhat.com/show_bug.cgi?id=2166004 * https://github.com/advisories/GHSA-jrmh-v64j-mjm9

 https://cve.radiocsirt.org/vuln/gsd-2023-0482 gsd-2023-0482 2026-10-02T13:26:43.360412+00:00 gsd-2023-0482 https://cve.radiocsirt.org/vuln/rhsa-2023:1512 RHSA-2023:1512 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update 2026-10-02T13:26:43.360424+00:00

SnakeYaml: Constructor Deserialization Remote Code Execution undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode hsqldb: Untrusted input may lead to RCE attack dev-java/snakeyaml: DoS via stack overflow codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider RESTEasy: creation of insecure temp files Undertow: Infinite loop in SslConduit during close

 https://cve.radiocsirt.org/vuln/tssa-2025-00001 tssa-2025-00001 — Project CSAF document 2026-10-02T13:26:43.360457+00:00

Detailed list of project vulnerabilities

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0482 UBUNTU-CVE-2023-0482 2026-10-02T13:26:43.360474+00:00

Affected: Ubuntu:Pro:16.04:LTS: resteasy, Ubuntu:Pro:18.04:LTS: resteasy3.0, Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:20.04:LTS: resteasy3.0, Ubuntu:22.04:LTS: resteasy3.0, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:24.04:LTS: resteasy3.0, Ubuntu:Pro:24.04:LTS: resteasy, Ubuntu:25.10: resteasy, Ubuntu:25.10: resteasy3.0 and 2 more

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0919 WID-SEC-W-2023-0919 — IBM WebSphere Application Server Liberty: Schwachstelle ermöglicht Privilegieneskalation 2026-10-02T13:26:43.360515+00:00

Ein lokaler Angreifer kann eine Schwachstelle in IBM WebSphere Application Server Liberty ausnutzen, um seine Privilegien zu erhöhen.