org.apache.myfaces.core:myfaces-impl vulnerabilities

CVEs whose affected-version data names the org.apache.myfaces.core:myfaces-impl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-68536Critical· 9.8

6d ago

Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.

Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.

▾ MidnightApache Software Foundation · org.apache.myfaces.core:myfaces-implEPSS 0.47%via NVD