44 matches found
de.agilecoders.wicket:wicket-bootstrap-extensions (>=6.0.6, <=7.0.14), de.agilecoders.wicket:wicket-bootstrap-samples (>=6.0.6, <=7.0.14) +39 more potentially affected by CVE-2026-46625 via org.webjars.npm:js-cookie (>=2.2.0, <=3.0.5)
org.webjars.npm:js-cookie MAVEN version =2.2.0, =6.0.6, =6.0.6, =2.3.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =4.0.0-m2 and more Source cves: CVE-2026-46625ht...
Deserialization Of Untrusted Data
Apache Causeway is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe Java deserialization of user-controllable URL parameters in ViewModel handling, which allows an authenticated attacker to execute arbitrary code with application privileges...
Apache Causeway Deserialization Vulnerability
Apache Causeway is the Apache Foundation of a Java rapid application development framework . Apache Causeway suffers from a deserialization vulnerability that originates from unsafe deserialization of user-controllable URL parameters in the receipt of serialized data submitted by the user, which...
CVE-2025-64408
Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution RCE through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be exploited by authenticated attackers to execute arbitrary cod...
org.apache.causeway.core:causeway-applib (2.0.0-rc1), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.0.0-rc1) +114 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.0.0-rc1)
org.apache.causeway.commons:causeway-commons MAVEN version 2.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.0.0-rc1 -...
org.apache.causeway.core:causeway-applib (2.0.0-rc2), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.0.0-rc2) +113 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.0.0-rc2)
org.apache.causeway.commons:causeway-commons MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.0.0-rc2 -...
org.apache.causeway.core:causeway-applib (2.0.0-rc3), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.0.0-rc3) +114 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.0.0-rc3)
org.apache.causeway.commons:causeway-commons MAVEN version 2.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.0.0-rc3 -...
org.apache.causeway.core:causeway-applib (2.0.0-rc4), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.0.0-rc4) +116 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.0.0-rc4)
org.apache.causeway.commons:causeway-commons MAVEN version 2.0.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.0.0-rc4 -...
org.apache.causeway.core:causeway-applib (2.0.0), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.0.0) +121 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.0.0)
org.apache.causeway.commons:causeway-commons MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.0.0 -...
org.apache.causeway.core:causeway-applib (2.1.0), org.apache.causeway.core:causeway-core-codegen-bytebuddy (2.1.0) +123 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (2.1.0)
org.apache.causeway.commons:causeway-commons MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - org.apache.causeway.core:causeway-applib 2.1.0 -...
dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:common-types-module (3.4.0) +153 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (>=3.0.0, <=3.4.0)
org.apache.causeway.commons:causeway-commons MAVEN version =3.0.0, =3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...
dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:common-types-module (3.4.0) +153 more potentially affected by CVE-2025-64408 via org.apache.causeway.commons:causeway-commons (>=3.0.0, <=3.4.0)
org.apache.causeway.commons:causeway-commons MAVEN version =3.0.0, =3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.commons:causeway-commons and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...
org.apache.causeway.core:causeway-core-config (2.0.0-rc2), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc2) +110 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc2)
org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc2 -...
org.apache.causeway.core:causeway-core-config (2.0.0-rc3), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc3) +111 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc3)
org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc3 -...
org.apache.causeway.core:causeway-core-config (2.0.0), org.apache.causeway.core:causeway-core-interaction (2.0.0) +118 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0)
org.apache.causeway.core:causeway-applib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0 -...
dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:common-types-module (3.4.0) +149 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (>=3.0.0, <=3.4.0)
org.apache.causeway.core:causeway-applib MAVEN version =3.0.0, =3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...
dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:common-types-module (3.4.0) +149 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (>=3.0.0, <=3.4.0)
org.apache.causeway.core:causeway-applib MAVEN version =3.0.0, =3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...
GHSA-WQ4C-57MH-5F7G Apache Causeway vulnerable to deserialization in Java
Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution RCE through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be exploited by authenticated attackers to execute arbitrary cod...
Apache Causeway vulnerable to deserialization in Java
Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution RCE through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be exploited by authenticated attackers to execute arbitrary cod...
