Read the docs
TI-2026-60356 Aliases CVE-2026-89058

Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

Priority HIGH 66CWE-346Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 9 fixed, 10 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-346.

Summary

A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-origin policy allows a malicious website to make credentialed cross-origin requests and read authenticated responses from a victim's session, resulting in a loss of confidentiality.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00474 41st percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 9 fixed, 10 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRESTEasybefore 6.2.19.Final; 7.0.0.Alpha1 to before 7.0.5.Final6.2.19.Final, 7.0.5.FinalPatch availableCNA
Red HatRed Hat Build of Apache Camel 3.33.4.redhat—6.2.19.Final-redhat-00003Patch availableCNA
Red HatRed Hat build of Quarkus 3.27.6.redhat—6.2.19.Final-redhat-00003Patch availableCNA
Red HatRed Hat build of Quarkus 3.33.4.redhat—6.2.19.Final-redhat-00003Patch availableCNA
Red HatRed Hat Enterprise Linux 10—11.9.0-6.el10_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—11.6.0-3.el10_0.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9—3.0.26-20.el9_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—3.0.26-20.el9_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—3.0.26-20.el9_6.2Patch availableCNA
Red HatRed Hat JBoss Enterprise Application Platform 8.1——Not affectedCNA
Red HatRed Hat JBoss Enterprise Application Platform 8.1——Not affectedCNA
Red HatRed Hat build of Apache Camel 4 for Quarkus 3——No fix listedCNA
Red HatRed Hat build of Apicurio Registry 3——No fix listedCNA
Red HatRed Hat build of Debezium 3——No fix listedCNA
Red HatRed Hat Build of Keycloak——No fix listedCNA
Red HatRed Hat Build of Keycloak——No fix listedCNA
Red HatRed Hat Certificate System 10——No fix listedCNA
Red HatRed Hat Certificate System 11——No fix listedCNA
Red HatRed Hat Enterprise Linux 8——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——Not affectedCNA
Red HatRed Hat Fuse 7——No fix listedCNA
Red HatRed Hat Fuse 7——No fix listedCNA
Red HatRed Hat JBoss Enterprise Application Platform 7——No fix listedCNA
Red HatRed Hat JBoss Enterprise Application Platform 7——No fix listedCNA
Red HatRed Hat JBoss Enterprise Application Platform 7——No fix listedCNA
Red HatRed Hat JBoss Enterprise Application Platform 7——No fix listedCNA
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack——No fix listedCNA
Red HatRed Hat Satellite 6——Not affectedCNA
Red HatRed Hat Single Sign-On 7——No fix listedCNA
  • RESTEasy VendorRed Hat Affected before 6.2.19.Final; 7.0.0.Alpha1 to before 7.0.5.Final Fixed in 6.2.19.Final, 7.0.5.Final Patch available CNA
  • Red Hat Build of Apache Camel 3.33.4.redhat VendorRed Hat Affected — Fixed in 6.2.19.Final-redhat-00003 Patch available CNA
  • Red Hat build of Quarkus 3.27.6.redhat VendorRed Hat Affected — Fixed in 6.2.19.Final-redhat-00003 Patch available CNA
  • Red Hat build of Quarkus 3.33.4.redhat VendorRed Hat Affected — Fixed in 6.2.19.Final-redhat-00003 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 11.9.0-6.el10_2.1 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 11.6.0-3.el10_0.2 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.0.26-20.el9_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.0.26-20.el9_4.2 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 3.0.26-20.el9_6.2 Patch available CNA
  • Red Hat JBoss Enterprise Application Platform 8.1 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat JBoss Enterprise Application Platform 8.1 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat build of Apache Camel 4 for Quarkus 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat build of Apicurio Registry 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat build of Debezium 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Certificate System 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Certificate System 11 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Fuse 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Fuse 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat JBoss Enterprise Application Platform 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat JBoss Enterprise Application Platform 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat JBoss Enterprise Application Platform 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat JBoss Enterprise Application Platform 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat JBoss Enterprise Application Platform Expansion Pack VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Satellite 6 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Single Sign-On 7 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 23

CPEVersionsRoleVendor
cpe:/a:redhat:apache_camel_quarkus:3.333.33—Red Hat
cpe:/a:redhat:quarkus:3.27::el83.27—Red Hat
cpe:/a:redhat:quarkus:3.33::el83.33—Red Hat
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/a:redhat:jboss_enterprise_application_platform:8.18.1—Red Hat
cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.06.0—Red Hat
  • cpe:/a:redhat:apache_camel_quarkus:3.33 Versions 3.33 — ·Red Hat
  • cpe:/a:redhat:quarkus:3.27::el8 Versions 3.27 — ·Red Hat
  • cpe:/a:redhat:quarkus:3.33::el8 Versions 3.33 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:jboss_enterprise_application_platform:8.1 Versions 8.1 — ·Red Hat
  • cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0 Versions 6.0 — ·Red Hat
Show 13 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:camel_quarkus:33—Red Hat
cpe:/a:redhat:apicurio_registry:33—Red Hat
cpe:/a:redhat:debezium:33—Red Hat
cpe:/a:redhat:build_keycloak:——Red Hat
cpe:/a:redhat:certificate_system:1010—Red Hat
cpe:/a:redhat:certificate_system:1111—Red Hat
cpe:/a:redhat:enterprise_linux:88—Red Hat
cpe:/a:redhat:enterprise_linux:99—Red Hat
cpe:/a:redhat:jboss_fuse:77—Red Hat
cpe:/a:redhat:jboss_enterprise_application_platform:77—Red Hat
cpe:/a:redhat:jbosseapxp——Red Hat
cpe:/a:redhat:satellite:66—Red Hat
cpe:/a:redhat:red_hat_single_sign_on:77—Red Hat
  • cpe:/a:redhat:camel_quarkus:3 Versions 3 — ·Red Hat
  • cpe:/a:redhat:apicurio_registry:3 Versions 3 — ·Red Hat
  • cpe:/a:redhat:debezium:3 Versions 3 — ·Red Hat
  • cpe:/a:redhat:build_keycloak: Versions — — ·Red Hat
  • cpe:/a:redhat:certificate_system:10 Versions 10 — ·Red Hat
  • cpe:/a:redhat:certificate_system:11 Versions 11 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
  • cpe:/a:redhat:jboss_fuse:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:jboss_enterprise_application_platform:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:jbosseapxp Versions — — ·Red Hat
  • cpe:/a:redhat:satellite:6 Versions 6 — ·Red Hat
  • cpe:/a:redhat:red_hat_single_sign_on:7 Versions 7 — ·Red Hat

Remediation

Red Hat 10 advisories

  • RHSA-2026:95887 Released 2026-11-06 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 8.1.9 security update
    • Red Hat JBoss Enterprise Application Platform 8.1
  • RHSA-2026:95504 Released 2026-11-05 · Red Hat rating Important
    resteasy security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) pki-resteasy-client-3.0.26-20.el9_6.2, pki-resteasy-core-3.0.26-20.el9_6.2, pki-resteasy-jackson2-provider-3.0.26-20.el9_6.2 +2
  • RHSA-2026:95505 Released 2026-11-05 · Red Hat rating Important
    resteasy security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) pki-resteasy-client-3.0.26-20.el9_4.2, pki-resteasy-core-3.0.26-20.el9_4.2, pki-resteasy-jackson2-provider-3.0.26-20.el9_4.2 +2
Show 7 more Red Hat advisories
  • RHSA-2026:95466 Released 2026-11-05 · Red Hat rating Important
    dogtag-pki security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) dogtag-pki-11.6.0-3.el10_0.2, idm-pki-acme-11.6.0-3.el10_0.2, idm-pki-base-11.6.0-3.el10_0.2 +6
  • RHSA-2026:95221 Released 2026-11-04 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 8.1.9 XP 6.0.7.GA release
    • Red Hat JBoss Enterprise Application Platform 8.1
  • RHSA-2026:92408 Released 2026-10-29 · Red Hat rating Important
    dogtag-pki security update
    • Red Hat Enterprise Linux AppStream (v. 10) dogtag-pki-11.9.0-6.el10_2.1, idm-pki-acme-11.9.0-6.el10_2.1, idm-pki-base-11.9.0-6.el10_2.1 +6
  • RHSA-2026:85234 Released 2026-10-19 · Red Hat rating Important
    resteasy security update
    • Red Hat Enterprise Linux AppStream (v. 9) pki-resteasy-client-3.0.26-20.el9_8.1, pki-resteasy-core-3.0.26-20.el9_8.1, pki-resteasy-jackson2-provider-3.0.26-20.el9_8.1 +2
  • RHSA-2026:83670 Released 2026-10-15 · Red Hat rating Important
    Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.GA)
    • Red Hat Build of Apache Camel 3.33.4.redhat com.fasterxml.jackson.core.jackson-core-2.21.7.redhat-00001.jar, com.fasterxml.jackson.core.jackson-databind-2.21.7.redhat-00001.jar, io.micrometer.micrometer-core-1.16.7.redhat-00002.jar +14
  • RHSA-2026:83520 Released 2026-10-15 · Red Hat rating Important
    Red Hat build of Quarkus 3.33.4 release and security update
    • Red Hat build of Quarkus 3.33.4.redhat at.yawk.lz4.lz4-java-1.11.1.rhel8-redhat-00001.jar, com.fasterxml.jackson.core.jackson-core-2.21.7.redhat-00001.jar, com.fasterxml.jackson.core.jackson-databind-2.21.7.redhat-00001.jar +10
  • RHSA-2026:83082 Released 2026-10-15 · Red Hat rating Important
    Red Hat build of Quarkus 3.27.6 release and security update
    • Red Hat build of Quarkus 3.27.6.redhat at.yawk.lz4.lz4-java-1.11.1.rhel8-redhat-00001.jar, com.fasterxml.jackson.core.jackson-core-2.21.7.redhat-00001.jar, com.fasterxml.jackson.core.jackson-databind-2.21.7.redhat-00001.jar +11

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:83670

    4 records Highest priority Priority HIGH 2 HIGH, 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    • TI-2026-63435 Uncontrolled resource consumption in Red Hat Build of Apache Camel 3.33.4.redhatPriority MEDIUM 41
    • TI-2026-62974 Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkusPriority LOW 30
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:85234

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    Show all 2 records → Advisory →
Show 4 more groups
  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:92408

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:95466

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:95504

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Build of Keycloak and 19 more products — RHSA-2026:95505

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-60357 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)Priority HIGH 72
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Build of KeycloakAffectedNo fix yet
Red Hat Certificate System 10AffectedNo fix yet
Red Hat Certificate System 11AffectedNo fix yet
Red Hat Fuse 7AffectedNo fix yet: Fix deferred
Red Hat JBoss Enterprise Application Platform 7AffectedNo fix yet: Fix deferred
Red Hat JBoss Enterprise Application Platform Expansion PackAffectedNo fix yet
Red Hat Single Sign-On 7AffectedNo fix yet: Fix deferred
Red Hat build of Apache Camel 4 for Quarkus 3AffectedNo fix yet
Red Hat build of Apicurio Registry 3AffectedNo fix yet: Fix deferred
Red Hat build of Debezium 3AffectedNo fix yet
Red Hat Build of Apache Camel 3.33.4.redhatFixed RHSA-2026:83670
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:92408
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:85234
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:95505
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:95466
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:95504
Red Hat JBoss Enterprise Application Platform 8.1Fixed RHSA-2026:95221
Red Hat build of Quarkus 3.27.6.redhatFixed RHSA-2026:83082
Red Hat build of Quarkus 3.33.4.redhatFixed RHSA-2026:83520
Not affected: 6 products
  • Red Hat Build of Apache Camel 3.33.4.redhat
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Satellite 6
  • Red Hat build of Quarkus 3.27.6.redhat
  • Red Hat build of Quarkus 3.33.4.redhat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-89058
  2. 2026-10-05 Weakness changed · CNA
  3. 2026-10-08 Affected versions changed · CNA
  4. 2026-10-09 Affected versions changed · CNA
  5. 2026-10-10 Affected versions changed · Red Hat
  6. 2026-10-13 Affected versions changed · Red Hat
  7. 2026-10-13 Affected versions changed · CNA
  8. 2026-10-16 Fix available: org.jboss.resteasy/[email protected] · CNA
  9. 2026-10-16 2 new references · CNA
  10. 2026-10-16 Fix available: RHSA-2026:83520 · Red Hat
  11. 2026-10-16 Fix available: RHSA-2026:83082 · Red Hat
  12. 2026-10-16 Fix available: Red Hat build of Quarkus 3.27.6.redhat, Red Hat build of Quarkus 3.33.4.redhat · Red Hat
  13. 2026-10-19 Fix available: resteasy@0:3.0.26-20.el9_8.1 · CNA
  14. 2026-10-19 1 new reference · CNA
  15. 2026-10-20 Fix available: RHSA-2026:85234 · Red Hat
  16. 2026-10-20 Fix available: Red Hat Enterprise Linux AppStream (v. 9) · Red Hat
  17. 2026-10-29 Fix available: dogtag-pki@0:11.9.0-6.el10_2.1 · CNA
  18. 2026-10-29 1 new reference · CNA
  19. 2026-10-30 Fix available: RHSA-2026:92408 · Red Hat
  20. 2026-10-30 Fix available: Red Hat Enterprise Linux AppStream (v. 10) · Red Hat
  21. 2026-11-04 Affected versions changed · CNA
  22. 2026-11-04 1 new reference · CNA
  23. 2026-11-04 Fix available: RHSA-2026:95221 · Red Hat
  24. 2026-11-04 Fix available: Red Hat JBoss Enterprise Application Platform 8.1 · Red Hat
  25. 2026-11-06 Fix available: dogtag-pki@0:11.6.0-3.el10_0.2, resteasy@0:3.0.26-20.el9_4.2, resteasy@0:3.0.26-20.el9_6.2 · CNA
  26. 2026-11-06 4 new references · CNA
  27. 2026-11-06 Fix available: RHSA-2026:95504 · Red Hat
  28. 2026-11-06 Fix available: RHSA-2026:95505 · Red Hat
  29. 2026-11-06 Fix available: RHSA-2026:95466 · Red Hat
  30. 2026-11-06 Fix available: Red Hat Build of Apache Camel 3.33.4.redhat, Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v. 10.0) +1 · Red Hat
  31. 2026-11-06 Fix available: RHSA-2026:83670 · Red Hat
  32. 2026-11-06 Affected versions changed · CNA
  33. 2026-11-06 1 new reference · CNA
  34. 2026-11-06 Fix available: RHSA-2026:95887 · Red Hat
  35. 2026-11-06 Affected versions changed · Red Hat

References

Advisory 10

Other 4

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences