{
  "cves": [
    "CVE-2026-89058",
    "CVE-2026-89059"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[3.0.26-20.1]\n- Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)\n- Resolves: RHEL-278032\n- Resolves: RHEL-277999",
  "id": "ELSA-2026-85234",
  "ovalId": "oval:com.oracle.elsa:def:202685234",
  "source": "oracle_linux",
  "title": "ELSA-2026-85234:  resteasy security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-85234.html"
}