resteasy-jaxrs is vulnerable to cache poisoning. The library does not add HTTP VARY: Origin headers to itβs responses, causing inaccurate caching when re-used across-origins.
www.securityfocus.com/bid/100465
access.redhat.com/errata/RHSA-2018:0002
access.redhat.com/errata/RHSA-2018:0003
access.redhat.com/errata/RHSA-2018:0004
access.redhat.com/errata/RHSA-2018:0005
access.redhat.com/errata/RHSA-2018:0478
access.redhat.com/errata/RHSA-2018:0479
access.redhat.com/errata/RHSA-2018:0480
access.redhat.com/errata/RHSA-2018:0481
bugzilla.redhat.com/show_bug.cgi?id=1483823
github.com/resteasy/Resteasy/pull/1300
issues.jboss.org/browse/RESTEASY-1704