CVE-2024-1726
1 advisory.
Maven/io.quarkus.resteasy.reactive:resteasy-reactive CVE-2024-1726: medium 5.3
Quarkus: security checks in resteasy reactive may trigger a denial of service
Action: Upgrade io.quarkus.resteasy.reactive:resteasy-reactive to 3.2.11.Final (3.2.x), 3.7.4 (3.7.x) or 3.8.0 (3.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.8.0.CR1 | 3.8.0 | - |
| 3.3.0.CR1 | 3.7.4 | - |
| 0 | 3.2.11.Final | - |
Fixed versions
| 3.8.0 | 3.7.4 | 3.2.11.Final |
Sources
- osv: GHSA-mv64-86g8-cqq7
- https://nvd.nist.gov/vuln/detail/CVE-2024-1726
- https://github.com/quarkusio/quarkus/commit/34c1a63baf5401d0d578a23a1a4deb4b841ce65b
- https://github.com/quarkusio/quarkus/commit/96d93427f3b4a7d3cff34d8b7b883e13cecd359c
- https://access.redhat.com/errata/RHSA-2024:1662
- https://access.redhat.com/security/cve/CVE-2024-1726
- https://bugzilla.redhat.com/show_bug.cgi?id=2265158
- https://github.com/quarkusio/quarkus
CVE-2024-1726 · published · modified · JSON