org.apache.openmeetings:openmeetings-db (>=5.0.0, <=9.0.0) potentially affected by CVE-2026-49488 via org.apache.openmeetings:openmeetings-util (>=5.0.0, <=9.0.0)

org.apache.openmeetings:openmeetings-util MAVEN version =5.0.0, =5.0.0, =9.0.0 Source cves: CVE-2026-49488 Source advisory: MEND:CVE-2026-49488...

org.apache.openmeetings:openmeetings-db (>=6.2.0, <=8.1.0) potentially affected by CVE-2026-33266 via org.apache.openmeetings:openmeetings-util (>=6.2.0, <=8.1.0)

org.apache.openmeetings:openmeetings-util MAVEN version =6.2.0, =6.2.0, =8.1.0 Source cves: CVE-2026-33266 Source advisory: SNYK:JAVA-ORGAPACHEOPENMEETINGS-16322846...

org.apache.openmeetings:openmeetings-db (>=6.2.0, <=8.1.0) potentially affected by CVE-2026-33266 via org.apache.openmeetings:openmeetings-util (>=6.2.0, <=8.1.0)

org.apache.openmeetings:openmeetings-util MAVEN version =6.2.0, =6.2.0, =8.1.0 Source cves: CVE-2026-33266 Source advisory: MEND:CVE-2026-33266...

Denial Of Service (DoS)

openmeetings-db is vulnerable to denial of service DoS attacks. The library does not properly restrict the size of files that can be uploaded, allowing a malicious user to upload multiple large files to the server to exhaust its resources...

Missing Secure Headers

openmeetings-db is vulnerable to missing secure headers. The library does not use secure HTTP headers, allowing a malicious user to conduct various attacks such as clickjacking...