com.ritense.valtimo:audit (>=13.4.0.release, <=13.22.0.release), com.ritense.valtimo:authorization (>=13.4.0.release, <=13.22.0.release) +78 more potentially affected by CVE-2026-42555 via com.ritense.valtimo:contract (>=13.4.0.release, <=13.22.0.release)

com.ritense.valtimo:contract MAVEN version =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.13.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release...

com.ritense.valtimo:audit (>=13.4.0.release, <=13.22.0.release), com.ritense.valtimo:authorization (>=13.4.0.release, <=13.22.0.release) +78 more potentially affected by CVE-2026-42555 via com.ritense.valtimo:contract (>=13.4.0.release, <=13.22.0.release)

com.ritense.valtimo:contract MAVEN version =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.13.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release...

CVE-2026-42555: Improper Control of Generation of Code

Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, and com.ritense.valtimo:contract from 13.4.0 to before 13.23.0 evaluate Spring Expression Language SpEL expressions...

com.ritense.valtimo:audit (>=13.4.0.release, <=13.22.0.release), com.ritense.valtimo:authorization (>=13.4.0.release, <=13.22.0.release) +78 more potentially affected by CVE-2026-42555 via com.ritense.valtimo:contract (>=13.4.0.release, <=13.22.0.release)

com.ritense.valtimo:contract MAVEN version =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.13.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release...

com.ritense.valtimo:audit (>=13.4.0.release, <=13.22.0.release), com.ritense.valtimo:authorization (>=13.4.0.release, <=13.22.0.release) +78 more potentially affected by CVE-2026-42555 via com.ritense.valtimo:contract (>=13.4.0.release, <=13.22.0.release)

com.ritense.valtimo:contract MAVEN version =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.13.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release, =13.4.0.release...