org.jboss.resteasy:resteasy-jaxrs (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.jboss.resteasy:resteasy-jaxrs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2016-6346 — CVSS 7.5 (high): RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
• CVE-2017-7561 — CVSS 7.5 (high): Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS…
• CVE-2014-7839 — CVSS 6.4 (medium): DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities…