Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.wicket:wicket-native-websocket-core

3 known vulnerabilities (1 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium, 2 low
Registry
Maven Central

Advisories 3

  • Apache Wicket: WebSocket messages are processed against an HTTP session snapshot that survives invalidation

    Affected: from 8.0.0, through 8.19.0; from 9.0.0, through 9.24.0; from 10.0.0, through 10.11.0.

  • Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invoke

    Affected: from 8.0.0, through 8.19.0; from 9.0.0, through 9.24.0; from 10.0.0, through 10.11.0.

  • CVE-2026-82115Medium 6.3

    Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource

    Affected: from 8.0.0, through 8.19.0; from 9.0.0, through 9.24.0; from 10.0.0, through 10.11.0.