Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.jackrabbit:jackrabbit-core

3 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 1 medium
Registry
Maven Central

Advisories 3

  • CVE-2025-58782Medium 6.5

    Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

    Affected: from 1.0.0, through 2.22.1; from 1.0.0, fixed in 2.22.2.

  • Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons

    Affected: from 2.23.0-beta, fixed in 2.23.2-beta; from 2.20.0, fixed in 2.20.17; from 2.22.0, fixed in 2.22.1.

  • XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6…

    Affected: fixed in 2.0.6; from 2.2.0, fixed in 2.2.14; from 2.4.0, fixed in 2.4.6; from 2.6.0, fixed in 2.6.6; from 2.8.0, fixed in 2.8.1; from 2.10.0, fixed in 2.10.1.