org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=4.0.7) +39 more potentially affected by CVE-2026-78330 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.2, =4.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =4.0.7 and more Source cves: CVE-2026-78330https://vulners.com/cve...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.7), org.apache.syncope.core:syncope-core-persistence-jpa-json (>=3.0.0-m0, <=3.0.16) +7 more potentially affected by CVE-2026-77051 via org.apache.syncope.core:syncope-core-persistence-jpa (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.7 Source cves: CVE-2026-77051 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-20186778...

SQL Injection

Overview org.apache.syncope.core:syncope-core-persistence-jpa is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to SQL Injection via the...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.2) +3 more potentially affected by CVE-2026-77051 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-77051 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-20186778...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.2) +13 more potentially affected by CVE-2026-73579 via org.apache.syncope.core:syncope-core-persistence-common (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-persistence-common MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0,...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.7), org.apache.syncope.core:syncope-core-persistence-jpa (>=4.0.0-m0, <=4.0.7) +13 more potentially affected by CVE-2026-73579 via org.apache.syncope.core:syncope-core-persistence-common (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-persistence-common MAVEN version =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.7), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.0.0-m0, <=4.0.7) +3 more potentially affected by CVE-2026-77051 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.7 Source cves: CVE-2026-77051 Source advisory: MEND:CVE-2026-77051...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.2) +3 more potentially affected by CVE-2026-77051 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-77051 Source advisory: MEND:CVE-2026-77051...

SQL Injection

Overview org.apache.syncope.core:syncope-core-persistence-jpa is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to SQL Injection via the sor...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.2) +3 more potentially affected by CVE-2026-82232 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-82232 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-20186785...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.7), org.apache.syncope.core:syncope-core-persistence-jpa-json (>=3.0.0-m0, <=3.0.16) +7 more potentially affected by CVE-2026-82232 via org.apache.syncope.core:syncope-core-persistence-jpa (>=3.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.7 Source cves: CVE-2026-82232 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-20186785...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.7), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.7) +33 more potentially affected by CVE-2026-78330 via org.apache.syncope.core:syncope-core-spring (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.7 and more Source cves: CVE-2026-78330https://vulne...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.2), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.2) +3 more potentially affected by CVE-2026-82232 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 Source cves: CVE-2026-82232 Source advisory: MEND:CVE-2026-82232...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.7), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.0.0-m0, <=4.0.7) +3 more potentially affected by CVE-2026-82232 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.0.0-m0, <=4.0.7)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.7 Source cves: CVE-2026-82232 Source advisory: MEND:CVE-2026-82232...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.1) +3 more potentially affected by CVE-2026-57308 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 Source cves: CVE-2026-57308 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-19352541...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.6), org.apache.syncope.core:syncope-core-persistence-jpa-json (>=3.0.0-m0, <=3.0.16) +7 more potentially affected by CVE-2026-57308 via org.apache.syncope.core:syncope-core-persistence-jpa (>=3.0.0-m0, <=4.0.6)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.6 Source cves: CVE-2026-57308 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-19352541...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.6), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.0.0-m0, <=4.0.6) +3 more potentially affected by CVE-2026-57308 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.0.0-m0, <=4.0.6)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.6 Source cves: CVE-2026-57308 Source advisory: MEND:CVE-2026-57308...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.1) +3 more potentially affected by CVE-2026-57308 via org.apache.syncope.core:syncope-core-persistence-jpa (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 Source cves: CVE-2026-57308 Source advisory: MEND:CVE-2026-57308...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.1) +33 more potentially affected by CVE-2026-53421 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 and more Source cves: CVE-2026-53421https://vu...

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=3.0.16), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=3.0.16) +30 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m0, <=3.0.16)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0, =3.0.16 and more Source cves:...