com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.1), com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.1) +1 more potentially affected by CVE-2026-45575 via com.oviva.telematik:epa4all-vau-client (>=1.0.0, <=1.2.1)

com.oviva.telematik:epa4all-vau-client MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.1 Source cves: CVE-2026-45575 Source advisory: SNYK:JAVA-COMOVIVATELEMATIK-17277596...

com.oviva.telematik:epa4all-rest-service (0.0.4) potentially affected by CVE-2026-45575 via com.oviva.telematik:epa4all-client (0.0.4)

com.oviva.telematik:epa4all-client MAVEN version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.4 Source cves: CVE-2026-45575 Source advisory:...

com.oviva.telematik:epa4all-rest-service (0.0.8) potentially affected by CVE-2026-45575 via com.oviva.telematik:epa4all-client (0.0.8)

com.oviva.telematik:epa4all-client MAVEN version 0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.8 Source cves: CVE-2026-45575 Source advisory:...

com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.1) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.1)

com.oviva.telematik:epa4all-client MAVEN version =1.0.0, =1.0.0, =1.2.1 Source cves: CVE-2026-45574 Source advisory: OSV:GHSA-5HHF-XMFX-4VVR...

com.oviva.telematik:epa4all-rest-service (0.0.7) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (0.0.7)

com.oviva.telematik:epa4all-client MAVEN version 0.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.7 Source cves: CVE-2026-45574 Source advisory:...

com.oviva.telematik:epa4all-rest-service (0.0.8) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (0.0.8)

com.oviva.telematik:epa4all-client MAVEN version 0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.8 Source cves: CVE-2026-45574 Source advisory:...

com.oviva.telematik:epa4all-rest-service (0.0.4) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (0.0.4)

com.oviva.telematik:epa4all-client MAVEN version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.4 Source cves: CVE-2026-45574 Source advisory:...

com.oviva.telematik:epa4all-rest-service (0.0.5) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (0.0.5)

com.oviva.telematik:epa4all-client MAVEN version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.5 Source cves: CVE-2026-45574 Source advisory:...

com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.1) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.1)

com.oviva.telematik:epa4all-client MAVEN version =1.0.0, =1.0.0, =1.2.1 Source cves: CVE-2026-45574 Source advisory: SNYK:JAVA-COMOVIVATELEMATIK-17326433...

com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.1) potentially affected by CVE-2026-45574 via com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.1)

com.oviva.telematik:epa4all-client MAVEN version =1.0.0, =1.0.0, =1.2.1 Source cves: CVE-2026-45574 Source advisory: GHSA-5HHF-XMFX-4VVR...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the handling of internal service references by the Gateway API provider. An attacker can gain unauthorized dynamic configuration write access by creating or updating an HTTPRoute that targets rest@internal, even...

com.oviva.telematik:epa4all-rest-service (0.0.5) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (0.0.5)

com.oviva.telematik:epa4all-client MAVEN version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.5 Source cves: CVE-2026-44900 Source advisory:...

com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.0), com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.0) +2 more potentially affected by CVE-2026-44900 via com.oviva.telematik:vau-httpclient (>=1.0.0, <=1.2.0)

com.oviva.telematik:vau-httpclient MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2026-44900 Source advisory: SNYK:JAVA-COMOVIVATELEMATIK-17157661...

com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.0) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.0)

com.oviva.telematik:epa4all-client MAVEN version =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2026-44900 Source advisory: OSV:GHSA-G8R3-5HWF-QP96...

com.oviva.telematik:epa4all-rest-service (0.0.4) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (0.0.4)

com.oviva.telematik:epa4all-client MAVEN version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.4 Source cves: CVE-2026-44900 Source advisory:...

com.oviva.telematik:epa4all-rest-service (>=1.0.0, <=1.2.0) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (>=1.0.0, <=1.2.0)

com.oviva.telematik:epa4all-client MAVEN version =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2026-44900 Source advisory: GHSA-G8R3-5HWF-QP96...

com.oviva.telematik:epa4all-rest-service (0.0.8) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (0.0.8)

com.oviva.telematik:epa4all-client MAVEN version 0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.8 Source cves: CVE-2026-44900 Source advisory:...

com.oviva.telematik:epa4all-rest-service (0.0.7) potentially affected by CVE-2026-44900 via com.oviva.telematik:epa4all-client (0.0.7)

com.oviva.telematik:epa4all-client MAVEN version 0.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.oviva.telematik:epa4all-client and may be impacted: - com.oviva.telematik:epa4all-rest-service 0.0.7 Source cves: CVE-2026-44900 Source advisory:...

CVE-2026-8115

CVE-2026-8115 affects gyoridavid short-video-maker (up to v1.3.4). The vulnerability is in the REST API component, specifically the file path src/server/routers/rest.ts. An input manipulation of req.params.tmpFile enables path traversal, with remote exploitation possible. Public exploit exists. T...

CVE-2026-3474

The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3. This is due to the action function in the TemplateData class passing user-supplied input from the 'emailkit-editor-templat...