{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59281.json" } ], "title": "org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applications", "tracking": { "current_release_date": "2026-09-24T22:12:45+00:00", "generator": { "date": "2026-09-24T22:12:45+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.4.0" } }, "id": "CVE-2026-59281", "initial_release_date": "2026-08-27T17:57:37.157000+00:00", "revision_history": [ { "date": "2026-08-27T17:57:37.157000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-09-24T21:09:01+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-09-24T22:12:45+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat build of Apache Camel - HawtIO 4", "product": { "name": "Red Hat build of Apache Camel - HawtIO 4", "product_id": "red_hat_build_of_apache_camel_-_hawtio_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_hawtio:4" } } } ], "category": "product_family", "name": "Red Hat build of Apache Camel - HawtIO 4" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_name", "name": "Red Hat Fuse 7", "product": { "name": "Red Hat Fuse 7", "product_id": "red_hat_fuse_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Dev Spaces", "product": { "name": "Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_name", "name": "Red Hat Single Sign-On 7", "product": { "name": "Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7" } } } ], "category": "product_family", "name": "Red Hat Single Sign-On 7" }, { "category": "product_version", "name": "spring-webmvc", "product": { "name": "spring-webmvc", "product_id": "spring-webmvc", "product_identification_helper": { "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.18" } } }, { "category": "product_version", "name": "resteasy-javadoc::pki-core:10.6", "product": { "name": "resteasy-javadoc (pki-core:10.6)", "product_id": "resteasy-javadoc::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-core:10.6" } } }, { "category": "product_version", "name": "resteasy::pki-core:10.6", "product": { "name": "resteasy (pki-core:10.6)", "product_id": "resteasy::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-core:10.6" } } }, { "category": "product_version", "name": "resteasy.src::pki-core:10.6", "product": { "name": "resteasy.src (pki-core:10.6)", "product_id": "resteasy.src::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-core:10.6" } } }, { "category": "product_version", "name": "resteasy-javadoc::pki-deps:10.6", "product": { "name": "resteasy-javadoc (pki-deps:10.6)", "product_id": "resteasy-javadoc::pki-deps:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-deps:10.6" } } }, { "category": "product_version", "name": "resteasy::pki-deps:10.6", "product": { "name": "resteasy (pki-deps:10.6)", "product_id": "resteasy::pki-deps:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-deps:10.6" } } }, { "category": "product_version", "name": "resteasy.src::pki-deps:10.6", "product": { "name": "resteasy.src (pki-deps:10.6)", "product_id": "resteasy.src::pki-deps:10.6", "product_identification_helper": { "purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-deps:10.6" } } }, { "category": "product_version", "name": "pki-resteasy-jackson2-provider", "product": { "name": "pki-resteasy-jackson2-provider", "product_id": "pki-resteasy-jackson2-provider", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-resteasy-jackson2-provider" } } }, { "category": "product_version", "name": "pki-resteasy-core", "product": { "name": "pki-resteasy-core", "product_id": "pki-resteasy-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-resteasy-core" } } }, { "category": "product_version", "name": "pki-resteasy-client", "product": { "name": "pki-resteasy-client", "product_id": "pki-resteasy-client", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-resteasy-client" } } }, { "category": "product_version", "name": "pki-resteasy", "product": { "name": "pki-resteasy", "product_id": "pki-resteasy", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-resteasy" } } }, { "category": "product_version", "name": "pki-resteasy-servlet-initializer", "product": { "name": "pki-resteasy-servlet-initializer", "product_id": "pki-resteasy-servlet-initializer", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-resteasy-servlet-initializer" } } }, { "category": "product_version", "name": "spring-webflux", "product": { "name": "spring-webflux", "product_id": "spring-webflux", "product_identification_helper": { "purl": "pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE" } } }, { "category": "product_version", "name": "devspaces/openvsx-rhel9", "product": { "name": "devspaces/openvsx-rhel9", "product_id": "devspaces/openvsx-rhel9", "product_identification_helper": { "purl": "pkg:oci/openvsx-rhel9@sha256:fa65ed94629e2037de34fa2ad1aaafe03b82208a6624cba5d449e5d888d014a2?repository_url=registry.redhat.io/devspaces/openvsx-rhel9" } } }, { "category": "product_version", "name": "devspaces/pluginregistry-rhel9", "product": { "name": "devspaces/pluginregistry-rhel9", "product_id": "devspaces/pluginregistry-rhel9", "product_identification_helper": { "purl": "pkg:oci/pluginregistry-rhel9@sha256:bc1e406b592abb5a0815433ca2c8f6d5e42067e1d15e36245623773af310d8c1?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "spring-webmvc as a component of Red Hat build of Apache Camel - HawtIO 4", "product_id": "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc" }, "product_reference": "spring-webmvc", "relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-javadoc (pki-core:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6" }, "product_reference": "resteasy-javadoc::pki-core:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-javadoc (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6" }, "product_reference": "resteasy-javadoc::pki-deps:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy.src (pki-core:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6" }, "product_reference": "resteasy.src::pki-core:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6" }, "product_reference": "resteasy.src::pki-deps:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy (pki-core:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy::pki-core:10.6" }, "product_reference": "resteasy::pki-core:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6" }, "product_reference": "resteasy::pki-deps:10.6", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "pki-resteasy as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:pki-resteasy" }, "product_reference": "pki-resteasy", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-resteasy-client as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:pki-resteasy-client" }, "product_reference": "pki-resteasy-client", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-resteasy-core as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:pki-resteasy-core" }, "product_reference": "pki-resteasy-core", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-resteasy-jackson2-provider as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider" }, "product_reference": "pki-resteasy-jackson2-provider", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-resteasy-servlet-initializer as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer" }, "product_reference": "pki-resteasy-servlet-initializer", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "spring-webflux as a component of Red Hat Fuse 7", "product_id": "red_hat_fuse_7:spring-webflux" }, "product_reference": "spring-webflux", "relates_to_product_reference": "red_hat_fuse_7" }, { "category": "default_component_of", "full_product_name": { "name": "spring-webmvc as a component of Red Hat Fuse 7", "product_id": "red_hat_fuse_7:spring-webmvc" }, "product_reference": "spring-webmvc", "relates_to_product_reference": "red_hat_fuse_7" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9" }, "product_reference": "devspaces/openvsx-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" }, "product_reference": "devspaces/pluginregistry-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "spring-webmvc as a component of Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7:spring-webmvc" }, "product_reference": "spring-webmvc", "relates_to_product_reference": "red_hat_single_sign-on_7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-59281", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "discovery_date": "2026-08-27T20:19:33.452037+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2525251" } ], "notes": [ { "category": "description", "text": "A flaw was found in Spring MVC and WebFlux applications. When these applications are configured to obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors, they become vulnerable. This vulnerability allows for arbitrary HTML or JavaScript code injection, potentially leading to a reflected cross-site scripting (XSS) attack where an attacker could execute malicious scripts in a user's web browser.", "title": "Vulnerability description" }, { "category": "summary", "text": "org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applications", "title": "Vulnerability summary" }, { "category": "other", "text": "A cross-site scripting (XSS) vulnerability was found in the Spring Framework EscapedErrors wrapper. In versions 7.0.0 through 7.0.8, 6.2.0 through 6.2.19, 6.1.0 through 6.1.28, 6.0.0 through 6.0.30, 5.3.0 through 5.3.49, and 5.2.25.RELEASE and earlier, Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors are vulnerable to arbitrary HTML and JavaScript code injection. The EscapedErrors wrapper's no argument accessors return the underlying field errors without escaping them, allowing attackers to inject malicious content that executes when the page is rendered, potentially resulting in reflected cross-site scripting attacks. This vulnerability was introduced in 2006 with Spring Framework 2.0. Red Hat ships Spring Framework version 2.x in Fedora, a community-supported distribution, which is affected by this vulnerability but is out of Red Hat's commercial support scope.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6", "red_hat_enterprise_linux_9:pki-resteasy", "red_hat_enterprise_linux_9:pki-resteasy-client", "red_hat_enterprise_linux_9:pki-resteasy-core", "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider", "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer", "red_hat_fuse_7:spring-webflux", "red_hat_fuse_7:spring-webmvc", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_single_sign-on_7:spring-webmvc" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-59281" }, { "category": "external", "summary": "RHBZ#2525251", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525251" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59281", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59281" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59281", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59281" }, { "category": "external", "summary": "https://spring.io/security/cve-2026-59281", "url": "https://spring.io/security/cve-2026-59281" } ], "release_date": "2026-08-27T17:57:37.157000+00:00", "remediations": [ { "category": "workaround", "details": "Red Hat does not provide fixes for Spring Framework in Fedora, as it is a community-supported product outside of Red Hat's commercial support scope. Fedora users should monitor upstream Spring Framework releases and community package updates.\n\nFor customers using Spring Framework in custom applications or third-party software, the following mitigations are available:\n\n1. Upgrade to Spring Framework 7.0.9 or later if using the 7.0.x line. Note that Spring Framework versions 4.3.x, 5.3.x, 6.1.x, and 6.2.x have reached end-of-life and will not receive public security updates.\n\n2. If immediate upgrade is not possible, reduce exposure by rendering field errors through the per-field getFieldErrors(String field) and getFieldError(String field) accessors, or through getAllErrors(), which are escaped correctly.\n\n3. Alternatively, explicitly HTML-escape the rejectedValue and defaultMessage of each field error in the template rather than relying on the wrapper to perform escaping.\n\n4. Implement Content Security Policy (CSP) headers to provide an additional layer of defense against XSS attacks.\n\n5. Review application code to identify uses of the no-argument Errors.getFieldErrors() or Errors.getFieldError() methods and replace them with the safer per-field accessors.", "product_ids": [ "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6", "red_hat_enterprise_linux_9:pki-resteasy", "red_hat_enterprise_linux_9:pki-resteasy-client", "red_hat_enterprise_linux_9:pki-resteasy-core", "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider", "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer", "red_hat_fuse_7:spring-webflux", "red_hat_fuse_7:spring-webmvc", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_single_sign-on_7:spring-webmvc" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "red_hat_fuse_7:spring-webflux", "red_hat_fuse_7:spring-webmvc", "red_hat_single_sign-on_7:spring-webmvc" ] }, { "category": "none_available", "details": "Fix deferred", "product_ids": [ "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6", "red_hat_enterprise_linux_9:pki-resteasy", "red_hat_enterprise_linux_9:pki-resteasy-client", "red_hat_enterprise_linux_9:pki-resteasy-core", "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider", "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6", "red_hat_enterprise_linux_9:pki-resteasy", "red_hat_enterprise_linux_9:pki-resteasy-client", "red_hat_enterprise_linux_9:pki-resteasy-core", "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider", "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer", "red_hat_fuse_7:spring-webflux", "red_hat_fuse_7:spring-webmvc", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_single_sign-on_7:spring-webmvc" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "red_hat_build_of_apache_camel_-_hawtio_4:spring-webmvc", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6", "red_hat_enterprise_linux_8:resteasy::pki-core:10.6", "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6", "red_hat_enterprise_linux_9:pki-resteasy", "red_hat_enterprise_linux_9:pki-resteasy-client", "red_hat_enterprise_linux_9:pki-resteasy-core", "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider", "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer", "red_hat_fuse_7:spring-webflux", "red_hat_fuse_7:spring-webmvc", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "red_hat_single_sign-on_7:spring-webmvc" ] } ], "title": "org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applications" } ] }