- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3
- Registry
- Maven Central
Advisories 3
- CVE-2026-97870Unrated
Apache TomEE: Missing authentication for Hessian endpoints in embedded HTTP server
Affected: from 4.6.0, through 4.7.5.
- CVE-2026-97872Unrated
Apache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settings
Affected: from 4.6.0, through 4.7.5.
- CVE-2026-97874Unrated
Apache TomEE: Authentication bypass for Hessian endpoints in non-root web applications
Affected: from 4.6.0, through 4.7.5.