apache_abdera vulnerabilities

CVEs whose affected-version data names the apache_abdera package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113582High· 7.5

yesterday

Apache Abdera: XML external entity expansion in Atom document parsing

UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access sensitive data or make server-side requests when an application parses attacker-controlled XML with Abdera. …

▾ TwilightApache Software Foundation · org.apache.abdera:abdera-parservia CVEORG