Most recent entries from all

cnvd-2018-03002

EUVD-2026-60973

fkie_cve-2018-1051

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

GHSA-m2fv-3rqm-g7p5 — Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider

Affected: Maven: org.jboss.resteasy:resteasy-yaml-provider

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

#### Mitigation: If the YamlProvider is enabled it's recommended to add authentication, and authorization to the endpoint expecting Yaml content to prevent exploitation of this vulnerability.

gsd-2018-1051

UBUNTU-CVE-2018-1051

Affected: Ubuntu:Pro:16.04:LTS: resteasy

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.