CVE-2026-40104

The XWiki Platform (versions 1.8-rc-1, 17.0.0-rc-1, 17.5.0-rc-1, and prior) is vulnerable to a resource exhaustion vulnerability in its REST API endpoints. Specifically, endpoints such as /xwiki/rest/wikis/xwiki/spaces/AnnotationCode/pages/AnnotationConfig/objects/AnnotationCode.AnnotationConfig/...

jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...