Repository navigation
|
Vulnerability Details : CVE-2023-0482In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user. |
Answered by
abstractj
May 5, 2023
Replies: 1 comment
|
@magixyu yes, CVEs fixes are planned by milestones and will be available in the upcoming releases. For more information, please see our list of issues: https://github.com/keycloak/keycloak. Our team recently updated most of its dependency and this should be reflected by scanning the nightly images, and they should be part of upcoming releases: |
0 replies
Answer selected by
abstractj
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
@magixyu yes, CVEs fixes are planned by milestones and will be available in the upcoming releases. For more information, please see our list of issues: https://github.com/keycloak/keycloak.
Our team recently updated most of its dependency and this should be reflected by scanning the nightly images, and they should be part of upcoming releases: