CVE-2026-43646

Apache Wicket is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The issue occurs because crafted URLs can bypass the PackageResourceGuard , leading to unauthorized information leakage. This vulnerability affects versions 8.0.0 through 8.17.0 , 9.0.0 thr...