Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

CVE-2026-55856 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

GHSA-G9JJ-CGMH-9F38 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

GHSA-QXVW-FVWX-5CP7 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

GHSA-XVR9-35CR-46V9 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

CVE-2026-55858 vulnerabilities

Vulnerabilities for packages: camunda, reposilite, keycloak, request-9047-keycloak-fips, flyway, airbyte-platform, metabase, camunda-zeebe, debezium, airbyte-platform-fips, keycloak-fips, flyway-fips, zipkin...

Reposilite Login Panel - Detect

Reposilite products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Reposilite products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Reposilite Login Panel - Detect', 'description':...

VulnCheck KEV: CVE-2024-36117

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

EUVD-2024-2552

Malicious code in bioql PyPI...

CVE-2024-36116

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite provides support for JavaDocs files, which are archives that contain documentation for artifacts. Specifically, JavadocEndpoints.kt controller allows to expand the...

CVE-2024-36115

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The problem lies i...

GHSA-82J3-HF72-7X93 Reposilite vulnerable to path traversal while serving javadoc expanded files (arbitrary file read) (`GHSL-2024-074`)

Summary Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Details The problem lies in the way how the expanded javadoc files are served. The GET /javadoc/repository//raw/ route uses the path parameter to find the file i...

Reposilite vulnerable to path traversal while serving javadoc expanded files (arbitrary file read) (`GHSL-2024-074`)

Summary Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Details The problem lies in the way how the expanded javadoc files are served. The GET /javadoc/repository//raw/ route uses the path parameter to find the file i...

Duplicate Advisory: Reposilite Arbitrary File Read vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-82j3-hf72-7x93. This link is maintained to preserve external references. Original description Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM...

GHSA-W7C4-5W4F-JM3G Duplicate Advisory: Reposilite Arbitrary File Read vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-82j3-hf72-7x93. This link is maintained to preserve external references. Original description Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM...

Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)

Summary Reposilite v3.5.10 is affected by an Arbitrary File Upload vulnerability via path traversal in expanding of Javadoc archives. Details Reposilite provides support for JavaDocs files, which are archives that contain documentation for artifacts. Specifically, JavadocEndpoints.kt controller...

GHSA-FRVJ-CFQ4-3228 Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)

Summary Reposilite v3.5.10 is affected by an Arbitrary File Upload vulnerability via path traversal in expanding of Javadoc archives. Details Reposilite provides support for JavaDocs files, which are archives that contain documentation for artifacts. Specifically, JavadocEndpoints.kt controller...

Reposilite artifacts vulnerable to Stored Cross-site Scripting

Summary Reposilite v3.5.10 is affected by Stored Cross-Site Scripting XSS when displaying artifact's content in the browser. Details As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The...

GHSA-9W8W-34VR-65J2 Reposilite artifacts vulnerable to Stored Cross-site Scripting

Summary Reposilite v3.5.10 is affected by Stored Cross-Site Scripting XSS when displaying artifact's content in the browser. Details As a Maven repository manager, Reposilite provides the ability to view the artifacts content in the browser, as well as perform administrative tasks via API. The...