{"action":"Upgrade io.quarkus.resteasy.reactive:resteasy-reactive to 3.2.11.Final (3.2.x), 3.7.4 (3.7.x) or 3.8.0 (3.8.x) or later.","affected":[{"fixed":"3.8.0","introduced":"3.8.0.CR1"},{"fixed":"3.7.4","introduced":"3.3.0.CR1"},{"fixed":"3.2.11.Final","introduced":"0"}],"component":"io.quarkus.resteasy.reactive:resteasy-reactive","cve_ids":["CVE-2024-1726"],"ecosystem":"Maven","epss":0.00727,"exploited":false,"fixed_versions":["3.8.0","3.7.4","3.2.11.Final"],"ghsa_id":"GHSA-mv64-86g8-cqq7","id":"tcs_01M5N95SEYX9M6HVP503TKTGSV","modified_at":"2024-04-25T23:56:50.611572Z","published_at":"2024-04-25T18:30:39Z","references":["https://osv.dev/vulnerability/GHSA-mv64-86g8-cqq7","https://nvd.nist.gov/vuln/detail/CVE-2024-1726","https://github.com/quarkusio/quarkus/commit/34c1a63baf5401d0d578a23a1a4deb4b841ce65b","https://github.com/quarkusio/quarkus/commit/96d93427f3b4a7d3cff34d8b7b883e13cecd359c","https://access.redhat.com/errata/RHSA-2024:1662","https://access.redhat.com/security/cve/CVE-2024-1726","https://bugzilla.redhat.com/show_bug.cgi?id=2265158","https://github.com/quarkusio/quarkus"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mv64-86g8-cqq7","url":"https://osv.dev/vulnerability/GHSA-mv64-86g8-cqq7"}],"summary":"Quarkus: security checks in resteasy reactive may trigger a denial of service"}