org.apache.karaf.config.core.impl vulnerabilities

CVEs whose affected-version data names the org.apache.karaf.config.core.impl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-91012None

today

org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties), which backs the "config" MBean and the config:* shell commands, derives the file it writes a configuration to from caller-supplied input without checking tha…

org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties), which backs the "config" MBean and the config:* shell commands, derives the file it writes a configuration to from caller-supplied input without checking tha…

▾ SunlitApache Software Foundation · org.apache.karaf.config.core.implvia NVD