Improper Input Validation Affecting resteasy package, versions *

Q: How to fix?

There is no fixed version for RHEL:10 resteasy .

Threat Intelligence

5.97% (94^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL10-RESTEASY-18522065
published5 Aug 2026
disclosed15 Dec 2016

Report a new vulnerability Found a mistake?

Introduced: 15 Dec 2016

CVE-2016-9606 (opens in a new tab) CWE-20 (opens in a new tab)

How to fix?

There is no fixed version for RHEL:10 resteasy.

NVD Description

Note: Versions mentioned in the description apply only to the upstream resteasy package and not the resteasy package as distributed by RHEL. See How to fix? for RHEL:10 relevant fixed versions and status.

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.