Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.eclipse.basyx:basyx.sdk

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
1.5.1 (Feb 5, 2024): affected by 2 advisories
Newest unaffected release
Every release is affected by at least one advisory
Advisories
2 · 1 critical, 1 high
Dependents
10
Releases
9 since 1.0.1 (Oct 21, 2021)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination…

    Affected: fixed in 2.0.0-milestone-10.

    No fix released. The advisory names 2.0.0-milestone-10 as the fix, which the registry doesn't have yet. The latest release, 1.5.1, is still affected.

  • CVE-2026-7411Critical 10.0

    In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an…

    Affected: fixed in 2.0.0-milestone-10.

    No fix released. The advisory names 2.0.0-milestone-10 as the fix, which the registry doesn't have yet. The latest release, 1.5.1, is still affected.