org.apache.jackrabbit:jackrabbit-spi2dav vulnerabilities

CVEs whose affected-version data names the org.apache.jackrabbit:jackrabbit-spi2dav package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92415Medium· 6.9

today

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantia…

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantia…

▾ SunlitApache Software Foundation · org.apache.jackrabbit:jackrabbit-spi2davvia NVD