org.apache.jackrabbit:jackrabbit-jcr-server vulnerabilities

CVEs whose affected-version data names the org.apache.jackrabbit:jackrabbit-jcr-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92414Critical· 9.3

today

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no c…

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no c…

▾ MidnightApache Software Foundation · org.apache.jackrabbit:jackrabbit-jcr-servervia NVD