org.dspace.modules:additions (6.0-rc1), org.dspace.modules:jspui (6.0-rc1) +14 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (6.0-rc1)

org.dspace:dspace-api MAVEN version 6.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.0-rc1 - org.dspace.modules:jspui 6.0-rc1 - org.dspace.modules:oai 6.0-rc1 -...

org.dspace.modules:additions (4.0-rc1), org.dspace.modules:jspui (4.0-rc1) +14 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (4.0-rc1)

org.dspace:dspace-api MAVEN version 4.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 4.0-rc1 - org.dspace.modules:jspui 4.0-rc1 - org.dspace.modules:lni 4.0-rc1 -...

org.dspace:dspace-jspui-api (1.5.2), org.dspace:dspace-jspui-webapp (1.5.2) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.2)

org.dspace:dspace-api MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2 - org.dspace:dspace-jspui-webapp 1.5.2 - org.dspace:dspace-lni-core 1.5.2 -...

org.dspace.modules:additions (6.0-rc4), org.dspace.modules:jspui (6.0-rc4) +14 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (6.0-rc4)

org.dspace:dspace-api MAVEN version 6.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.0-rc4 - org.dspace.modules:jspui 6.0-rc4 - org.dspace.modules:oai 6.0-rc4 -...

org.dspace:dspace-jspui-api (1.5.2-rc2), org.dspace:dspace-jspui-webapp (1.5.2-rc2) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.2-rc2)

org.dspace:dspace-api MAVEN version 1.5.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2-rc2 - org.dspace:dspace-jspui-webapp 1.5.2-rc2 - org.dspace:dspace-lni-core...

org.dspace.modules:additions (6.4), org.dspace.modules:jspui (6.4) +15 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (6.4)

org.dspace:dspace-api MAVEN version 6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.4 - org.dspace.modules:jspui 6.4 - org.dspace.modules:oai 6.4 - org.dspace.modules:rdf 6...

de.the-library-code.dspace:addon-identifiers-enduring-submission-api (5.8.0), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (5.8.0) +19 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (5.8)

org.dspace:dspace-api MAVEN version 5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - de.the-library-code.dspace:addon-identifiers-enduring-submission-api 5.8.0 -...

org.dspace.modules:jspui (1.8.2), org.dspace.modules:lni (1.8.2) +25 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.8.2)

org.dspace:dspace-api MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.8.2 - org.dspace.modules:lni 1.8.2 - org.dspace.modules:oai 1.8.2 - org.dspace.modules:swo...

org.dspace:dspace-jspui-api (1.6.2), org.dspace:dspace-jspui-webapp (1.6.2) +9 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.6.2)

org.dspace:dspace-api MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.6.2 - org.dspace:dspace-jspui-webapp 1.6.2 - org.dspace:dspace-lni-core 1.6.2 -...

org.dspace.modules:additions (4.0-rc2), org.dspace.modules:jspui (4.0-rc2) +14 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (4.0-rc2)

org.dspace:dspace-api MAVEN version 4.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 4.0-rc2 - org.dspace.modules:jspui 4.0-rc2 - org.dspace.modules:lni 4.0-rc2 -...

org.dspace.modules:additions (5.3), org.dspace.modules:jspui (5.3) +17 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (5.3)

org.dspace:dspace-api MAVEN version 5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.3 - org.dspace.modules:jspui 5.3 - org.dspace.modules:lni 5.3 - org.dspace.modules:oai 5...

org.dspace.modules:additions (5.11), org.dspace.modules:jspui (5.11) +18 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (5.11)

org.dspace:dspace-api MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.11 - org.dspace.modules:jspui 5.11 - org.dspace.modules:lni 5.11 - org.dspace.modules:o...

org.dspace.modules:additions (7.0-preview-1), org.dspace.modules:oai (7.0-preview-1) +12 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (7.0-preview-1)

org.dspace:dspace-api MAVEN version 7.0-preview-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 7.0-preview-1 - org.dspace.modules:oai 7.0-preview-1 - org.dspace.modules:rdf...

org.dspace.modules:additions (5.7), org.dspace.modules:jspui (5.7) +17 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (5.7)

org.dspace:dspace-api MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.7 - org.dspace.modules:jspui 5.7 - org.dspace.modules:lni 5.7 - org.dspace.modules:oai 5...

org.dspace:dspace-jspui-api (1.5.0), org.dspace:dspace-jspui-webapp (1.5.0) +8 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (1.5.0)

org.dspace:dspace-api MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0 - org.dspace:dspace-jspui-webapp 1.5.0 - org.dspace:dspace-lni-core 1.5.0 -...

de.the-library-code.dspace:addon-duplication-detection-service-api (6.2.0), de.the-library-code.dspace:addon-duplication-detection-service-jspui (6.2.0) +16 more potentially affected by CVE-2026-49831 via org.dspace:dspace-api (6.2)

org.dspace:dspace-api MAVEN version 6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - de.the-library-code.dspace:addon-duplication-detection-service-api 6.2.0 -...

Arbitrary Code Injection

Overview org.dspace:dspace-api is a DSpace core data model and service APIs. Affected versions of this package are vulnerable to Arbitrary Code Injection through the Velocity template processing in org.dspace.core.LDN and org.dspace.core.Email. An attacker with DSpace administrator credentials ca...

Path Traversal

org.dspace, dspace-api is vulnerable to path traversal. The vulnerability is due to improper validation of file paths in the Simple Archive Format SAF importer, which allows an attacker to craft a malicious SAF package referencing arbitrary system files...

org.dspace:dspace-jspui-api (1.5.0-beta1), org.dspace:dspace-jspui-webapp (1.5.0-beta1) +10 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.0-beta1)

org.dspace:dspace-api MAVEN version 1.5.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0-beta1 - org.dspace:dspace-jspui-webapp 1.5.0-beta1 -...

org.dataone.dspace:auto-versioning-api (>=5.4.0, <=5.4.2), org.dataone.dspace:auto-versioning-xmlui (>=5.4.0, <=5.4.2) +20 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.4)

org.dspace:dspace-api MAVEN version 5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dataone.dspace:auto-versioning-api =5.4.0, =5.4.0, =5.4.0, =5.4.2 - org.dspace.modules:additions 5.4 -...