{"action":"Upgrade io.quarkus.resteasy.reactive:resteasy-reactive to 2.13.9.Final (2.x) or 3.2.9.Final (3.x) or later.","affected":[{"fixed":"2.13.9.Final","introduced":"0"},{"fixed":"3.2.9.Final","introduced":"3.0.0.Final"}],"component":"io.quarkus.resteasy.reactive:resteasy-reactive","cve_ids":["CVE-2023-6267"],"ecosystem":"Maven","epss":0.00719,"exploited":false,"fixed_versions":["2.13.9.Final","3.2.9.Final"],"ghsa_id":"GHSA-8j3x-w35r-rw4r","id":"tcs_01M5N8MYBSJX50HZNRP0CZS68J","modified_at":"2024-11-25T15:09:06.884996Z","published_at":"2024-01-25T21:32:14Z","references":["https://osv.dev/vulnerability/GHSA-8j3x-w35r-rw4r","https://nvd.nist.gov/vuln/detail/CVE-2023-6267","https://access.redhat.com/errata/RHSA-2024:0494","https://access.redhat.com/errata/RHSA-2024:0495","https://access.redhat.com/security/cve/CVE-2023-6267","https://bugzilla.redhat.com/show_bug.cgi?id=2251155","https://github.com/quarkusio/quarkus"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-8j3x-w35r-rw4r","url":"https://osv.dev/vulnerability/GHSA-8j3x-w35r-rw4r"}],"summary":"Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability"}