{"cves":["CVE-2026-89058","CVE-2026-89059"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[3.0.26-20.1]\n- Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)\n- Resolves: RHEL-278032\n- Resolves: RHEL-277999","id":"ELSA-2026-85234","ovalId":"oval:com.oracle.elsa:def:202685234","source":"oracle_linux","title":"ELSA-2026-85234:  resteasy security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-85234.html"}